Static task
static1
Behavioral task
behavioral1
Sample
843a211c098d461f52b948af94a07918_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
843a211c098d461f52b948af94a07918_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
843a211c098d461f52b948af94a07918_JaffaCakes118
-
Size
415KB
-
MD5
843a211c098d461f52b948af94a07918
-
SHA1
34a97a705b8bdfc7d91b047f97b1b4aac44c4c63
-
SHA256
d267f10ff544c4c195579382a85c9c0a3d9fd26b6a080c5b1795021b873f4744
-
SHA512
76ac2e6e75a8666a412f25ebf23366613efba4bc5154e6d71dbc94733facf30a6f3091d215908c0f7ea39fe9562098af26f1b135b8296a6a8290d3251d9ef730
-
SSDEEP
12288:4Z6TIoft2yugll2jnAaeX6mXM3W4/Plf:4Z6glQlCn0X6X3WoNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 843a211c098d461f52b948af94a07918_JaffaCakes118
Files
-
843a211c098d461f52b948af94a07918_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2bb8d50f1627b5c7966119cde5e67ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetStdHandle
RaiseException
EnterCriticalSection
Sleep
CloseHandle
LockResource
SetErrorMode
FileTimeToLocalFileTime
GlobalAddAtomA
GlobalDeleteAtom
GetLastError
LoadLibraryExA
GetLocaleInfoA
GetLogicalDrives
GetACP
VirtualProtect
GlobalFree
InterlockedExchange
IsBadReadPtr
HeapCreate
user32
ShowWindow
DrawEdge
GetParent
BeginPaint
ReleaseDC
GetCursorPos
GetClassNameA
SetForegroundWindow
IsIconic
wsprintfA
GetMenuItemInfoA
ValidateRect
GetWindow
DrawTextA
GetActiveWindow
FrameRect
EndPaint
GetFocus
GetWindowTextA
httpapi
HttpAddUrl
HttpInitialize
HttpTerminate
HttpCreateHttpHandle
HttpRemoveUrl
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ