Static task
static1
Behavioral task
behavioral1
Sample
e87e4b61f17e1e8560ac4e00bfc5ba03_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e87e4b61f17e1e8560ac4e00bfc5ba03_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e87e4b61f17e1e8560ac4e00bfc5ba03_JaffaCakes118
-
Size
18KB
-
MD5
e87e4b61f17e1e8560ac4e00bfc5ba03
-
SHA1
5036f2e5cbba53142531e7bb73453d316a45542d
-
SHA256
30c1a26e8faee0b1b9ce9003752a80710d81820d41d772c09b68ba250920183b
-
SHA512
6a2be048f3ed0c52065937f97662d4fec7ec7e95a757d701a9147a470091f6c62340178aa2dcf11a2f197c49f87e7f1a6b6d5f388680d4d15d00bb48133c09ea
-
SSDEEP
384:CE8dUcEpvxFMfneD7np0PLgSIgCxInhhPV6k21GNA4MWDm:CE8dBqnxUhm1T4MW6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e87e4b61f17e1e8560ac4e00bfc5ba03_JaffaCakes118
Files
-
e87e4b61f17e1e8560ac4e00bfc5ba03_JaffaCakes118.exe windows:4 windows x86 arch:x86
8db0a949b14de5d83ad839e991460dcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleFileNameA
GetProcAddress
GetSystemTime
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
ReadFile
Sleep
WideCharToMultiByte
WriteFile
lstrcatA
lstrcpyA
lstrlenA
wsock32
WSACleanup
WSAStartup
closesocket
connect
gethostbyaddr
gethostbyname
htons
ioctlsocket
recv
send
socket
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ