Static task
static1
Behavioral task
behavioral1
Sample
f5d4f85174f550ea744153044dee7029_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f5d4f85174f550ea744153044dee7029_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5d4f85174f550ea744153044dee7029_JaffaCakes118
-
Size
415KB
-
MD5
f5d4f85174f550ea744153044dee7029
-
SHA1
a8c17f28bbab0443fe83bc03f96da02f7af93c92
-
SHA256
19bf70a6426cb4a197b69cae65df4e2bc963502f4386759b67a5788b8b218881
-
SHA512
89a06c3ad15caac4c666f5fe7efebe8591ae92904ac54f98d53b53a4ffeb58d453cedfcb6f592169017299999af8b3ae0be20b1c8cdef36bcf41782a9c0b8f3f
-
SSDEEP
6144:y1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:yKowTWTq4yzd/tS7U8tEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d4f85174f550ea744153044dee7029_JaffaCakes118
Files
-
f5d4f85174f550ea744153044dee7029_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7cfb548c15ac3d008616f3e5aa912d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetACP
HeapCreate
RaiseException
Sleep
LoadLibraryExA
GetCommandLineA
LockResource
GlobalAddAtomA
GetFileAttributesA
GlobalFree
GetLogicalDrives
CloseHandle
SetErrorMode
GetSystemDirectoryA
GetLocaleInfoA
InterlockedExchange
VirtualProtect
GetLastError
GetStdHandle
GlobalDeleteAtom
user32
GetMenuItemInfoA
GetActiveWindow
IsIconic
wsprintfA
GetFocus
BeginPaint
ValidateRect
GetClassNameA
ReleaseDC
GetCursorPos
EndPaint
FrameRect
GetParent
DrawEdge
DrawTextA
GetWindow
SetForegroundWindow
GetWindowTextA
ShowWindow
httpapi
HttpRemoveUrl
HttpTerminate
HttpInitialize
HttpAddUrl
HttpCreateHttpHandle
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ