Static task
static1
Behavioral task
behavioral1
Sample
3692431cf285df90bf9588a3c2d06e6c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3692431cf285df90bf9588a3c2d06e6c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3692431cf285df90bf9588a3c2d06e6c_JaffaCakes118
-
Size
108KB
-
MD5
3692431cf285df90bf9588a3c2d06e6c
-
SHA1
2d6f3b9d975eb58895466693449b7a15148a931e
-
SHA256
bc1afbb8fca305090c52316d48e53c4ea549af549e09e73d54c95e72093cb16f
-
SHA512
0568b210f9fb9858b77b556f3274aec20601267ff97c93f50249a6b189c99d9f4c56f5f2120ce5e9976a1fb514d977451db403e65134c57b2797c3b73d5fd147
-
SSDEEP
1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlw4qCIEnP:zozVZvJm01mBXqTEnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3692431cf285df90bf9588a3c2d06e6c_JaffaCakes118
Files
-
3692431cf285df90bf9588a3c2d06e6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3fe98783c971443e9a7e6cadf916a81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpQueryInfoW
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetOpenUrlA
InternetCanonicalizeUrlW
InternetReadFile
ole32
CoInitialize
CoCreateInstance
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ws2_32
gethostbyname
WSAStartup
WSACleanup
shlwapi
PathGetCharTypeW
kernel32
LoadLibraryA
ReadFile
GetFileSize
CreateFileMappingA
MapViewOfFile
RtlMoveMemory
RtlZeroMemory
VirtualProtect
lstrcmpA
lstrcpynA
lstrlenA
LockResource
LoadResource
CreateProcessA
lstrcatA
Sleep
GetVersionExA
ExitProcess
CloseHandle
GetModuleFileNameA
GetDiskFreeSpaceExA
CreateDirectoryA
CreateFileA
SystemTimeToFileTime
GetSystemTime
CreateMutexA
MoveFileA
DeleteFileA
OutputDebugStringA
CopyFileA
GetWindowsDirectoryA
lstrcpyA
MulDiv
FlushFileBuffers
WriteFile
SetFilePointer
GetLastError
ExitThread
TerminateThread
CreateThread
SizeofResource
FreeLibrary
RtlUnwind
CompareStringA
InterlockedExchange
GetModuleHandleA
GetSystemDirectoryA
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA
GetCommandLineA
UnmapViewOfFile
GetTickCount
user32
CharLowerA
SendMessageA
GetDlgItem
CreateDialogParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetDlgItemTextA
GetDlgItemTextA
SetFocus
GetDC
InvalidateRect
SetWindowPos
ShowWindow
SetForegroundWindow
IsWindowVisible
EnableMenuItem
GetSystemMenu
gdi32
CreateFontIndirectA
GetDeviceCaps
advapi32
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
OpenSCManagerW
RegFlushKey
RegOpenKeyExA
CloseServiceHandle
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ