Static task
static1
Behavioral task
behavioral1
Sample
2649c569fc45e5794eb2918dc22680ad_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2649c569fc45e5794eb2918dc22680ad_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2649c569fc45e5794eb2918dc22680ad_JaffaCakes118
-
Size
177KB
-
MD5
2649c569fc45e5794eb2918dc22680ad
-
SHA1
cbe5fb393722a11e57403a13013484bfe49e364d
-
SHA256
41f80936b6a180bb3391393e44baab0b33b77a66d2d5c763f61786feb0d53754
-
SHA512
8a0a748d6bc1055891b8566ecd6c706fbc78d99bb02d86d69ee9a8140ce3fec779c00f2d4afadb98a2387c74f6e68cdecc28916ad8475a2b3c2e86440c088202
-
SSDEEP
3072:KO152RLp04MghS0oKqYu+zpt+Lb6REXn1acOxx0mwU96clyAVrKLR2RyUHDq:KI2RLp0rWSHYhWb6yXn1aL8u0AZq0sUH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2649c569fc45e5794eb2918dc22680ad_JaffaCakes118
Files
-
2649c569fc45e5794eb2918dc22680ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d63c5b5ddf03c3b8421781e4c42728d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashA
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
kernel32
GetFileAttributesW
GetVersionExA
GetAtomNameW
UnlockFile
FileTimeToLocalFileTime
LockFile
SearchPathA
FileTimeToSystemTime
FlushFileBuffers
EnumResourceNamesA
IsDBCSLeadByte
GetVolumeInformationA
CompareStringA
FindResourceExW
TzSpecificLocalTimeToSystemTime
GetUserDefaultLangID
GetFileTime
SetEndOfFile
GetFileType
GetProfileStringA
GetSystemDirectoryA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
oleacc
LresultFromObject
CreateStdAccessibleObject
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ