Static task
static1
Behavioral task
behavioral1
Sample
fe70505351ae5e7cf1aa9b4fa462d5af_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe70505351ae5e7cf1aa9b4fa462d5af_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe70505351ae5e7cf1aa9b4fa462d5af_JaffaCakes118
-
Size
108KB
-
MD5
fe70505351ae5e7cf1aa9b4fa462d5af
-
SHA1
85ed8769d39caca77a6772e32d521c2c067d72df
-
SHA256
ad2dd990efbeec31a2185b1134b50a372fb7f84be6b0e2153c3e88152573df68
-
SHA512
0a63a45cbf1a5b621382eef872f090a79307bfc0fcc9355245b2c57474638453099acb38afbfa9530d73b7e66e6021cc6f4f1be6d5345fe8f5e8b8a82020952e
-
SSDEEP
1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlwhZEnP:zozVZvJm01mBmEnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe70505351ae5e7cf1aa9b4fa462d5af_JaffaCakes118
Files
-
fe70505351ae5e7cf1aa9b4fa462d5af_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3fe98783c971443e9a7e6cadf916a81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpQueryInfoW
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetOpenUrlA
InternetCanonicalizeUrlW
InternetReadFile
ole32
CoInitialize
CoCreateInstance
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ws2_32
gethostbyname
WSAStartup
WSACleanup
shlwapi
PathGetCharTypeW
kernel32
LoadLibraryA
ReadFile
GetFileSize
CreateFileMappingA
MapViewOfFile
RtlMoveMemory
RtlZeroMemory
VirtualProtect
lstrcmpA
lstrcpynA
lstrlenA
LockResource
LoadResource
CreateProcessA
lstrcatA
Sleep
GetVersionExA
ExitProcess
CloseHandle
GetModuleFileNameA
GetDiskFreeSpaceExA
CreateDirectoryA
CreateFileA
SystemTimeToFileTime
GetSystemTime
CreateMutexA
MoveFileA
DeleteFileA
OutputDebugStringA
CopyFileA
GetWindowsDirectoryA
lstrcpyA
MulDiv
FlushFileBuffers
WriteFile
SetFilePointer
GetLastError
ExitThread
TerminateThread
CreateThread
SizeofResource
FreeLibrary
RtlUnwind
CompareStringA
InterlockedExchange
GetModuleHandleA
GetSystemDirectoryA
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA
GetCommandLineA
UnmapViewOfFile
GetTickCount
user32
CharLowerA
SendMessageA
GetDlgItem
CreateDialogParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetDlgItemTextA
GetDlgItemTextA
SetFocus
GetDC
InvalidateRect
SetWindowPos
ShowWindow
SetForegroundWindow
IsWindowVisible
EnableMenuItem
GetSystemMenu
gdi32
CreateFontIndirectA
GetDeviceCaps
advapi32
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
OpenSCManagerW
RegFlushKey
RegOpenKeyExA
CloseServiceHandle
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ