Static task
static1
Behavioral task
behavioral1
Sample
b237dd8309ef9c6e2c60dd3ead62abb6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b237dd8309ef9c6e2c60dd3ead62abb6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b237dd8309ef9c6e2c60dd3ead62abb6_JaffaCakes118
-
Size
635KB
-
MD5
b237dd8309ef9c6e2c60dd3ead62abb6
-
SHA1
67b17abe21ef2490ed7c5be90d44f410fbb4dec5
-
SHA256
4eb9109d251e1b593d1e66f4057819c6fc32a65909b2068b8f9e60230c7fbed9
-
SHA512
210176272ff38c28d3493375a2cd6b1ceb72c2bace09a81e40a7b9e19fa46d0b3b3380517aa98a2f5172f134fdf02a469a7936621af1c635aaacc91b75e3f81b
-
SSDEEP
12288:nXyZ9OB1+rvybfo7LMarxx0mMlUBd8T6+o/jxUSGh/DzZc:nmqvfygc8uBE6+OjaQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b237dd8309ef9c6e2c60dd3ead62abb6_JaffaCakes118
Files
-
b237dd8309ef9c6e2c60dd3ead62abb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c5c340f777215f80014bd7ab8bfd653
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetACP
GetLogicalDrives
LoadLibraryExA
RaiseException
GetLastError
GlobalAddAtomA
LockResource
GlobalAddAtomA
InterlockedExchange
VirtualProtect
EnterCriticalSection
GlobalFree
GetFileAttributesExA
CloseHandle
SetErrorMode
GetCommandLineA
GetStdHandle
GetLocaleInfoA
GetSystemDirectoryA
Sleep
user32
DrawTextA
GetWindow
wsprintfA
ValidateRect
FrameRect
GetParent
GetWindowTextA
ShowWindow
GetClassNameA
GetFocus
GetActiveWindow
FlashWindowEx
SetForegroundWindow
FillRect
EndPaint
IsIconic
ReleaseDC
BeginPaint
GetCursorPos
httpapi
HttpAddUrl
HttpCreateHttpHandle
HttpAddFragmentToCache
HttpInitialize
HttpTerminate
winhttp
WinHttpOpen
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ