Static task
static1
Behavioral task
behavioral1
Sample
ce3bbe40a7a1007e936a69cdb3fcbb98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce3bbe40a7a1007e936a69cdb3fcbb98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce3bbe40a7a1007e936a69cdb3fcbb98_JaffaCakes118
-
Size
312KB
-
MD5
ce3bbe40a7a1007e936a69cdb3fcbb98
-
SHA1
8fe17f82d0020ee809c53ba69c7415ffc397af1a
-
SHA256
965a4086aca011ac1c5f36733e183a5d05fb8475b9dd2b8d435b4b26ce476809
-
SHA512
d5f023c8e0af12ee753d6ce944c30fc117fc9f4877abdd93eafa4d9359877efe083cd2dda9a07bdf8b152d1048cb8907f1cb499ad52f63eb76dbf9d10780603a
-
SSDEEP
6144:+B4U8SZ6FFZGjaCLoOAG99sAEa4LZtz5ft13ZC11b2+Lh+679+y7Ul/WtBB+Wxa:DjCmFLCLXiAMN5l1k11b225l7Uy+U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3bbe40a7a1007e936a69cdb3fcbb98_JaffaCakes118
Files
-
ce3bbe40a7a1007e936a69cdb3fcbb98_JaffaCakes118.exe windows:4 windows x86 arch:x86
83769c1c3b5fe130af21f5a0a520e925
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
LoadLibraryExA
InterlockedExchange
GetStdHandle
GlobalFree
Sleep
ReleaseMutex
GetLogicalDrives
CloseHandle
GetSystemDirectoryA
GetLocaleInfoA
GetACP
GetCommandLineA
ResetEvent
HeapCreate
FindFirstFileA
GetLastError
SetErrorMode
EnterCriticalSection
SetEvent
VirtualProtect
user32
ValidateRect
GetCursorPos
GetParent
FlashWindowEx
ShowWindow
GetClassNameA
EndPaint
GetActiveWindow
DrawTextA
FillRect
GetWindow
FrameRect
IsIconic
BeginPaint
GetWindowTextA
ReleaseDC
GetFocus
SetForegroundWindow
wsprintfA
httpapi
HttpInitialize
HttpCreateHttpHandle
HttpAddUrl
HttpTerminate
HttpAddFragmentToCache
winhttp
WinHttpOpen
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ