Static task
static1
Behavioral task
behavioral1
Sample
90fc02edf0bb5b071c91c25ddca5befe_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
90fc02edf0bb5b071c91c25ddca5befe_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
90fc02edf0bb5b071c91c25ddca5befe_JaffaCakes118
-
Size
116KB
-
MD5
90fc02edf0bb5b071c91c25ddca5befe
-
SHA1
1b714171799646b8cc25c2476cda8f8c9006376a
-
SHA256
7c6ab433df7c7f0d201965e2bf3ea5e225b9b7fcbfc2be7be5aadc7428ad8970
-
SHA512
62d7dc42de806c868c4bb6da2deb950217945d253edd22bfe566979ca0e15581a4c06b0bc1f9f24d1950c6683db43d6edc8819c060ef319d61f4dd4c0afbd32c
-
SSDEEP
3072:F8XKhkuo6/L123/9t0w3c8kP18r0DvCbEpTi:FA6/L1s9TFH6T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 90fc02edf0bb5b071c91c25ddca5befe_JaffaCakes118
Files
-
90fc02edf0bb5b071c91c25ddca5befe_JaffaCakes118.exe windows:4 windows x86 arch:x86
831c168c3666278e73370394afd4c767
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCombineUrlW
FtpRenameFileA
InternetOpenUrlW
HttpAddRequestHeadersA
GopherGetLocatorTypeW
DeleteUrlCacheEntry
HttpAddRequestHeadersW
FtpPutFileA
InternetDial
FindFirstUrlCacheEntryExA
RetrieveUrlCacheEntryStreamA
GopherOpenFileW
InternetCrackUrlW
DeleteUrlCacheGroup
ReadUrlCacheEntryStream
SetUrlCacheEntryInfoA
InternetLockRequestFile
InternetConnectA
GetUrlCacheEntryInfoExA
InternetReadFileExA
FtpGetFileW
GetUrlCacheEntryInfoExW
FtpGetFileA
InternetHangUp
InternetSetOptionA
InternetSetDialState
HttpOpenRequestA
CreateUrlCacheGroup
InternetWriteFile
FindCloseUrlCache
CommitUrlCacheEntryW
kernel32
GetFileSize
FindResourceA
FindCloseChangeNotification
GlobalLock
GetModuleFileNameW
AddAtomA
GetProfileStringA
GetPrivateProfileStringW
EnumSystemLocalesW
ClearCommError
IsWow64Process
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ