Static task
static1
Behavioral task
behavioral1
Sample
0ec5f83557736a96f04632458766428b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ec5f83557736a96f04632458766428b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0ec5f83557736a96f04632458766428b_JaffaCakes118
-
Size
7KB
-
MD5
0ec5f83557736a96f04632458766428b
-
SHA1
b0661bb1949a4437736fd00f131547e6f6690540
-
SHA256
361393680e9b06ecaed73b135fcb622569a4f12cc61653ec989905b6699247f1
-
SHA512
735201968d1da36d749e9bc261dcf5f50234d18168e3bfd776b8bb126cba9bcd0dfce9544f2601a648e93fe971e0841db19a46c600eec7e639fd76248c053aa1
-
SSDEEP
192:/6n/jxIEwHbA3g1YTOwP1oynymLwaZLg/RG3SRC/VAd:/6n/jmow+TOm1smLwaZL0RG3SRC/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec5f83557736a96f04632458766428b_JaffaCakes118
Files
-
0ec5f83557736a96f04632458766428b_JaffaCakes118.exe windows:5 windows x86 arch:x86
c969b5954bfd226f0f968270fb7d5900
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_snprintf
strstr
strchr
atoi
_controlfp
_except_handler3
strlen
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
strtok
ws2_32
WSAStartup
kernel32
HeapAlloc
GetStartupInfoA
GetModuleHandleA
GetProcAddress
CreateProcessA
GetFileAttributesA
GetCurrentProcess
CloseHandle
ReleaseMutex
CreateMutexA
SetLastError
GetLastError
WaitForSingleObject
CreateFileA
ExitProcess
DeleteFileA
GetModuleFileNameA
GetVersionExW
GetVolumeInformationA
CreateThread
Sleep
GetProcessHeap
HeapFree
MoveFileA
wininet
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetSetOptionW
InternetReadFile
InternetOpenUrlA
InternetQueryDataAvailable
InternetConnectA
shell32
SHGetSpecialFolderPathA
advapi32
RegCloseKey
RegCreateKeyExA
RegNotifyChangeKeyValue
RegSetValueExA
urlmon
ObtainUserAgentString
secur32
GetUserNameExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ