Static task
static1
Behavioral task
behavioral1
Sample
0248d06f51120f6deeb2e0805553ea2c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0248d06f51120f6deeb2e0805553ea2c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0248d06f51120f6deeb2e0805553ea2c_JaffaCakes118
-
Size
72KB
-
MD5
0248d06f51120f6deeb2e0805553ea2c
-
SHA1
6571822e67d8a904ea4fccee7325cca97edd06a5
-
SHA256
de83567a813fc80051a98e7a91175a44ac985f06c47f4e9efcb003edfd1a80fc
-
SHA512
c8c2e2b0e9a38d72b42b74e0578f7731b702661e3e6724440c51355b8bcaa3e3fae7622a29295e81eb14e1fc0e71307025b406de88ff68b2f62b996799f454a1
-
SSDEEP
1536:szBCoXi4AtPsY7dgMBMxJ/Ur9ls/DQpp8IG:slCki4MPswDexJK9lsLQp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0248d06f51120f6deeb2e0805553ea2c_JaffaCakes118
Files
-
0248d06f51120f6deeb2e0805553ea2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad2584877e04439062f30dd1a47ee56b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
EnumResourceTypesA
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
SetLastError
TlsAlloc
lstrcmpiA
lstrlenA
user32
CreateIcon
DestroyWindow
EndMenu
IsCharUpperA
MessageBoxIndirectA
LoadAcceleratorsW
MessageBoxA
ActivateKeyboardLayout
advapi32
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegCloseKey
ole32
OleUninitialize
ReleaseStgMedium
OleSetClipboard
OleInitialize
CreateOleAdviseHolder
CoUninitialize
CoInitialize
CoGetClassObject
CoCreateInstance
wininet
HttpAddRequestHeadersA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetGetCookieA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetSetOptionExA
InternetSetStatusCallbackA
InternetWriteFile
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ