Static task
static1
Behavioral task
behavioral1
Sample
309c051efe0a0270e795b4cc4f688695_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
309c051efe0a0270e795b4cc4f688695_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
309c051efe0a0270e795b4cc4f688695_JaffaCakes118
-
Size
64KB
-
MD5
309c051efe0a0270e795b4cc4f688695
-
SHA1
82dc0d71f29e5d8fd5291ec1f0e9c5f59ee7daf1
-
SHA256
6b3b51ecca52c893960828ef4fb296d0f757d16fe589732e6887bf9fc2790688
-
SHA512
99c5f2fbd95ebfd64dcff42d1f545fb5cbdd72a5928fcc3e7119217d634a50fcde403fa220bd2b5b54e8e11bc470411e45dc7ae10f42a6672bc98c7d730c8a0c
-
SSDEEP
1536:vZHwsCub7riF0qXyvTk9FHedKxGrtlcZ+e:MFViNtlcZ+e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 309c051efe0a0270e795b4cc4f688695_JaffaCakes118
Files
-
309c051efe0a0270e795b4cc4f688695_JaffaCakes118.exe windows:4 windows x86 arch:x86
d663c84ac713b47e7f2f461436614432
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetTempFileNameA
CreateFileA
VirtualAlloc
GetFileSize
ReadFile
SetFilePointer
WriteFile
VirtualFree
CloseHandle
CreateProcessA
WaitForSingleObject
DeleteFileA
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FlushFileBuffers
LCMapStringW
LCMapStringA
lstrcatA
lstrlenA
GetVolumeInformationA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapDestroy
HeapCreate
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetOEMCP
GetCPInfo
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
GetModuleFileNameA
advapi32
CryptAcquireContextA
CryptGetHashParam
CryptHashData
CryptCreateHash
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
CryptReleaseContext
shell32
ShellExecuteA
wininet
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
urlmon
URLDownloadToCacheFileA
user32
wsprintfA
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE