Static task
static1
Behavioral task
behavioral1
Sample
867b4e35cea0a414e264049de7877513_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
867b4e35cea0a414e264049de7877513_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
867b4e35cea0a414e264049de7877513_JaffaCakes118
-
Size
980KB
-
MD5
867b4e35cea0a414e264049de7877513
-
SHA1
809d74ed918a2c44c46c200e607e9b23883b8f38
-
SHA256
4dda8893a8fd07073770271a8768add7e9bfc4695b36fb57ed8d84e2269a55da
-
SHA512
20d76be09ced6593e31d7eee6490825ed81e82837b8a0af555a969129fbf23feafc70c108d369aa15b8ef9cb30070e435f21128bae6a40768223b4137afe8f76
-
SSDEEP
12288:3ROt5yWH2KrotslSYsokHfhzC6PLZnwZDVQBv4lSJVbCDNGnzG6zhlDlgocBWzpv:38t5pYtsl+rwLEyKbCBetJcWzBHtN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 867b4e35cea0a414e264049de7877513_JaffaCakes118
Files
-
867b4e35cea0a414e264049de7877513_JaffaCakes118.exe windows:5 windows x86 arch:x86
bf178548d7980cf9ea9387a0baa54873
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlW
InternetQueryOptionW
InternetSetOptionW
InternetOpenW
ole32
CoTaskMemAlloc
ReleaseStgMedium
CreateStreamOnHGlobal
CoGetMalloc
CLSIDFromProgID
kernel32
SetUnhandledExceptionFilter
CreateFileW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
VirtualAlloc
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetFileSize
CloseHandle
GetStartupInfoW
OutputDebugStringW
GetTempPathW
GetFileAttributesW
QueryPerformanceCounter
GetLocaleInfoW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameW
WriteFile
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringW
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
GetStringTypeW
HeapSize
secur32
DeleteSecurityContext
FreeCredentialsHandle
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 870KB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ