Static task
static1
Behavioral task
behavioral1
Sample
07c0de42ceb700a5f6a6d7644ea998f2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07c0de42ceb700a5f6a6d7644ea998f2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07c0de42ceb700a5f6a6d7644ea998f2_JaffaCakes118
-
Size
44KB
-
MD5
07c0de42ceb700a5f6a6d7644ea998f2
-
SHA1
375a6c835aaf80b8fc467836a11a8cf530fce2c6
-
SHA256
d82aff612b19f2b960f073563b0de0b16f93e56a85abb9eeb2585ef711288c77
-
SHA512
e071a1554be98a6fff5ac3593592c0ab50904d85fff357bf5d358f7ad5face36c962c23b1e80d6f3430cc9e6a178a5c058e288988061813cb3a1488980873676
-
SSDEEP
768:qdm/iy0WMCNDpYh3cA/WSQd1Xe1vsBfvlz:qdmlPFuxrQXWWlz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c0de42ceb700a5f6a6d7644ea998f2_JaffaCakes118
Files
-
07c0de42ceb700a5f6a6d7644ea998f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
6058b53ff96c78e8aec119ae440ec8f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
RemoveDirectoryA
CreateDirectoryA
WritePrivateProfileStringA
GetShortPathNameA
MoveFileExA
GetVersionExA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
LoadLibraryA
user32
wsprintfA
shell32
ShellExecuteA
wininet
InternetReadFile
InternetCloseHandle
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ