Static task
static1
Behavioral task
behavioral1
Sample
555b5d89ddbf24291658375ccc03bb38_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
555b5d89ddbf24291658375ccc03bb38_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
555b5d89ddbf24291658375ccc03bb38_JaffaCakes118
-
Size
415KB
-
MD5
555b5d89ddbf24291658375ccc03bb38
-
SHA1
cd5ecc5f29c11063c45a6068b54494f7d2e67b42
-
SHA256
6f2e5e022724457a5b454ce67eb55872376a8c4ee8161504f7f838e1279ff043
-
SHA512
ad817abbf5773da165c6c6dda8348c425b8df17210f9e936ad2d97638f4d8251aa0d107bb8cc47337ed16b6a8846084468e874b361b0a8ce443b199b0938e0aa
-
SSDEEP
6144:a6b2I7dBJY+l8EAnddMJfnDnDYiktjAg2SDj2uqLUITtjtz:a6qIprYLsr0iktjrpDSFJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 555b5d89ddbf24291658375ccc03bb38_JaffaCakes118
Files
-
555b5d89ddbf24291658375ccc03bb38_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5256b65abf9fb2a7fa0f97aff5892e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
GetLocaleInfoA
LoadLibraryExA
GlobalAddAtomA
EnterCriticalSection
CloseHandle
GlobalAddAtomA
GetSystemDirectoryA
HeapCreate
GetStdHandle
InterlockedExchange
LockResource
Sleep
GetCommandLineA
GetFileAttributesExA
VirtualProtect
RaiseException
GlobalFree
GetACP
SetErrorMode
GetLastError
user32
SetForegroundWindow
GetParent
wsprintfA
IsIconic
FillRect
GetWindowTextA
FlashWindowEx
GetClassNameA
DrawTextA
FrameRect
GetCursorPos
ValidateRect
ReleaseDC
GetFocus
GetActiveWindow
BeginPaint
ShowWindow
GetWindow
EndPaint
httpapi
HttpAddFragmentToCache
HttpCreateHttpHandle
HttpInitialize
HttpAddUrl
HttpTerminate
winhttp
WinHttpOpen
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ