Static task
static1
Behavioral task
behavioral1
Sample
3d58fa3f92ea9d2cd8242de055248f9c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d58fa3f92ea9d2cd8242de055248f9c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d58fa3f92ea9d2cd8242de055248f9c_JaffaCakes118
-
Size
28KB
-
MD5
3d58fa3f92ea9d2cd8242de055248f9c
-
SHA1
62f4e2411333a6273cb3f0e9ca56431c8acb6e01
-
SHA256
42ca664dc92a2e305144eaad696d41336614cff4eeeb74e0465d0c457263d335
-
SHA512
16e2f4987b717b54a828b5b9f219ecd9229cbd75d6597d8cab8f82b2c4a13f358dfbef6a3bea4ca4a2e56d1c6f5ced3bf3ab83672edb4fd8d01083cc80b3905c
-
SSDEEP
384:k4KATtyzaI9EOxZVf8CtuEY0lH91hmpObhsFgOuEF315hmVysMM+0moUKnt6v:aAYzaIP8CtDld1hmI9SZl50yb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d58fa3f92ea9d2cd8242de055248f9c_JaffaCakes118
Files
-
3d58fa3f92ea9d2cd8242de055248f9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
23cea9127d5adc8ed11a47f0884da02d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2763
ord4129
ord4277
ord356
ord2770
ord2781
ord3178
ord4058
ord2784
ord668
ord4202
ord2915
ord5572
ord5861
ord860
ord537
ord858
ord800
ord540
ord939
ord941
ord541
ord2818
ord535
ord4204
ord801
ord823
ord825
ord1601
ord2846
ord6143
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_CxxThrowException
??1type_info@@UAE@XZ
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
atoi
_mbscmp
localtime
mktime
sprintf
__CxxFrameHandler
time
rand
srand
kernel32
InterlockedDecrement
SystemTimeToFileTime
GetSystemTime
WriteFile
CreateFileA
GetModuleFileNameA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetVersionExA
GetSystemDefaultLangID
CloseHandle
ReleaseMutex
GetLastError
lstrlenA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
FlushFileBuffers
CreateProcessA
CreateMutexA
LocalFree
MultiByteToWideChar
SetFileTime
user32
GetSystemMetrics
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
VariantInit
VariantClear
SysAllocString
wininet
HttpOpenRequestA
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
HttpSendRequestA
InternetConnectA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE