Static task
static1
Behavioral task
behavioral1
Sample
38b0280a6f0b08c04bd9d50413bbd22a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38b0280a6f0b08c04bd9d50413bbd22a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38b0280a6f0b08c04bd9d50413bbd22a_JaffaCakes118
-
Size
65KB
-
MD5
38b0280a6f0b08c04bd9d50413bbd22a
-
SHA1
07216c56873db7840315f1b2730a05537a09506a
-
SHA256
818cc88b90db91f50295b0530fce75c64f64af1a2b05083ee095f97281dd42ed
-
SHA512
7e168bb1f0ed431b8f607eb66b5132e05767bd20e9c5512beeaa14efa52434bef41eb559156127b160a5f05497ffad4fcb4ffcdf84da6582bd9038099e661084
-
SSDEEP
768:hex3ybzo7+sN8hgDJUG+dosRLSNL/9fLdP6NVGXnDS:hexCISomgaG+dsJTsVGXnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b0280a6f0b08c04bd9d50413bbd22a_JaffaCakes118
Files
-
38b0280a6f0b08c04bd9d50413bbd22a_JaffaCakes118.exe windows:4 windows x86 arch:x86
35caaafcfdb7f4fcd78e066366a01598
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlA
kernel32
SetUnhandledExceptionFilter
GetCurrentProcess
FindResourceW
LoadResource
SetEvent
WaitForMultipleObjects
CreateEventW
GetDateFormatW
GetLastError
GetModuleFileNameW
LocalFree
WaitForSingleObject
InitializeCriticalSection
Sleep
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
LoadLibraryW
CreateMutexW
GetProcAddress
softpub
SoftpubCleanup
HTTPSCertificateTrust
SoftpubFreeDefUsageCallData
cabinet
FCIFlushCabinet
Sections
.edata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.etj Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sL Size: 4KB - Virtual size: 665KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.XCKr Size: 1024B - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JKfWny Size: 1024B - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 10KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lLbArT Size: 4KB - Virtual size: 853KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 333KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NIelvC Size: 1KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ