Static task
static1
Behavioral task
behavioral1
Sample
048e3956d1ae59d88250e7fa274d21a1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
048e3956d1ae59d88250e7fa274d21a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
048e3956d1ae59d88250e7fa274d21a1_JaffaCakes118
-
Size
415KB
-
MD5
048e3956d1ae59d88250e7fa274d21a1
-
SHA1
a7302caa234b27ebf22cda6da294b8d192c8a710
-
SHA256
bb71ad05ac0e79d712e5fa0a791f672778d1a502a6151c6c9e1cab2d2e12c201
-
SHA512
f41e3585bfd9963c0a2a9cdaaa4ebf179d5d5833e5476b47ff033e7522545e9a80f4c0ed84344d258bd47c8e059aeafcd39d51f52a12dac4dc8be1e2267a5cf6
-
SSDEEP
6144:41ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:4KowTWTq4yzd/tS7U8tEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048e3956d1ae59d88250e7fa274d21a1_JaffaCakes118
Files
-
048e3956d1ae59d88250e7fa274d21a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
45c96cb0f1847eb6ae1d5a947039f315
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GlobalFree
EnterCriticalSection
GlobalDeleteAtom
GetACP
LoadLibraryExA
GetLocaleInfoA
GetSystemDirectoryA
InterlockedExchange
GetCommandLineA
GetLogicalDrives
Sleep
GetStdHandle
HeapCreate
LockResource
GetFileAttributesA
CloseHandle
GetLastError
SetErrorMode
RaiseException
VirtualProtect
user32
wsprintfA
GetActiveWindow
GetClassNameA
ShowWindow
GetWindowTextA
DrawEdge
EndPaint
DrawTextA
GetWindow
SetForegroundWindow
GetFocus
GetParent
ReleaseDC
ValidateRect
FrameRect
GetCursorPos
IsIconic
GetMenuItemInfoA
BeginPaint
httpapi
HttpRemoveUrl
HttpAddUrl
HttpInitialize
HttpCreateHttpHandle
HttpTerminate
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ