Static task
static1
Behavioral task
behavioral1
Sample
4316cee298df3ba612576e2b3acc9509_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4316cee298df3ba612576e2b3acc9509_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4316cee298df3ba612576e2b3acc9509_JaffaCakes118
-
Size
287KB
-
MD5
4316cee298df3ba612576e2b3acc9509
-
SHA1
d8ac2b6986e3aa9c2cb1dcadfee5579b7596e63d
-
SHA256
63212deb9302b8727655c1378356473f6a2cc5d38b6aa3a581ea0825fabada7b
-
SHA512
6efcb86039989086c579af4a97f7da2bff387e6859ff9f1aafc1ee92c3947f856bb5346707f6fb92a7e3f9044ecbf96d4beee42141dc3f1e82680bfb93d58fe8
-
SSDEEP
6144:tppSggop+07WpVULMpaBD4o+9Dw2z+uuzKu4/eJlCHiddw0:17GVUtuo+9Dw2duz8wcHi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4316cee298df3ba612576e2b3acc9509_JaffaCakes118
Files
-
4316cee298df3ba612576e2b3acc9509_JaffaCakes118.exe windows:4 windows x86 arch:x86
47d08ec6bc795c795e60257d3c8010ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
oleacc
CreateStdAccessibleObject
shlwapi
GetAcceptLanguagesA
UrlUnescapeW
PathCreateFromUrlW
PathRemoveFileSpecW
PathAppendW
UrlCreateFromPathW
PathIsRelativeW
PathFindExtensionW
StrCmpIW
PathCombineW
kernel32
GlobalFindAtomW
TerminateProcess
GetCurrentProcess
GetProcessHeap
GetLocaleInfoW
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcessId
InterlockedCompareExchange
EnumResourceLanguagesA
QueryPerformanceCounter
FoldStringW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InterlockedExchange
GetPrivateProfileSectionW
GetTickCount
GetCurrentThreadId
GetStartupInfoA
GetModuleHandleW
LocalAlloc
DeleteFileW
Sections
.text Size: 150KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ