Static task
static1
Behavioral task
behavioral1
Sample
c97fc9a1ce60a3689fd1ea0b51e8e0e0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c97fc9a1ce60a3689fd1ea0b51e8e0e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c97fc9a1ce60a3689fd1ea0b51e8e0e0_JaffaCakes118
-
Size
415KB
-
MD5
c97fc9a1ce60a3689fd1ea0b51e8e0e0
-
SHA1
4c25e79d1c6d3c8643b0f9145c002537257d3f7b
-
SHA256
0e4a60e6f444f8c7afa865f41465d8db9cff15f342ecf13f150073e72738d4e1
-
SHA512
21452438303014585d3af8cf4eb021afff5d75f544c7949e0fb9455e21a726f46b5e6bd012758bc8deb5b19442a64930bfb0975c5701a4a65a805dbb2d43d585
-
SSDEEP
12288:wXZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:YZ6glQlCn0X6X3WoNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c97fc9a1ce60a3689fd1ea0b51e8e0e0_JaffaCakes118
Files
-
c97fc9a1ce60a3689fd1ea0b51e8e0e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
24285bb2b443508799d444043ac8adb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetLogicalDrives
GetLocaleInfoA
GlobalFree
EnterCriticalSection
GlobalDeleteAtom
GetStdHandle
GetLastError
Sleep
SetErrorMode
IsBadReadPtr
VirtualProtect
CloseHandle
InterlockedExchange
HeapCreate
LoadLibraryExA
RaiseException
GetACP
LockResource
FileTimeToLocalFileTime
GetCommandLineA
user32
IsIconic
SetForegroundWindow
ShowWindow
GetWindow
GetParent
ReleaseDC
GetMenuItemInfoA
EndPaint
wsprintfA
GetFocus
BeginPaint
GetActiveWindow
DrawEdge
GetCursorPos
GetWindowTextA
DrawTextA
ValidateRect
FrameRect
GetClassNameA
httpapi
HttpRemoveUrl
HttpInitialize
HttpAddUrl
HttpCreateHttpHandle
HttpTerminate
msutb
GetPopupTipbar
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ