Static task
static1
Behavioral task
behavioral1
Sample
55fed8eb0cb6356979db982c86e3b548_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55fed8eb0cb6356979db982c86e3b548_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55fed8eb0cb6356979db982c86e3b548_JaffaCakes118
-
Size
310KB
-
MD5
55fed8eb0cb6356979db982c86e3b548
-
SHA1
a13557d303b089e6d4820d680ca2890c48ea5212
-
SHA256
f49f2fd15e12da79485529d24ad111d0fe1a0c0181c6d29bc112b2563475ba80
-
SHA512
5abeae48293b5008806af69c015469b3323329cb40603a576cb6181e33d8e1d33f9b3027af9d636426e80dd08102b0796b1b95cba0870f697ab2fde615aad814
-
SSDEEP
6144:Mb8dsS02/oPbqhjCVTS/EGQalR+pSXSYZaKYxzXpztpz6cI0:8S0YI5FS/vQxBYQtzRVI0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55fed8eb0cb6356979db982c86e3b548_JaffaCakes118
Files
-
55fed8eb0cb6356979db982c86e3b548_JaffaCakes118.exe windows:4 windows x86 arch:x86
141e0bb144d02d08ab5fa709657ec243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
GlobalUnlock
GetACP
GetLastError
InterlockedExchange
FileTimeToLocalFileTime
GlobalDeleteAtom
SetConsoleOutputCP
EnterCriticalSection
RaiseException
HeapCreate
Sleep
VirtualProtect
GetLocaleInfoA
LoadLibraryExA
CloseHandle
GlobalFree
GetDriveTypeA
GlobalAddAtomA
SetErrorMode
GetStdHandle
user32
GetFocus
ReleaseDC
DrawEdge
DrawTextA
GetMenuItemInfoA
IsIconic
GetCursorPos
ClipCursor
GetActiveWindow
GetWindow
SetForegroundWindow
GetParent
BeginPaint
ValidateRect
ShowWindow
GetClassNameA
GetWindowTextA
EndPaint
OemToCharW
httpapi
HttpCreateHttpHandle
HttpRemoveUrl
HttpInitialize
HttpAddUrl
HttpTerminate
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ