Static task
static1
Behavioral task
behavioral1
Sample
458d704fb0df5f2fcaaaa3bd348f4bcb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
458d704fb0df5f2fcaaaa3bd348f4bcb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
458d704fb0df5f2fcaaaa3bd348f4bcb_JaffaCakes118
-
Size
68KB
-
MD5
458d704fb0df5f2fcaaaa3bd348f4bcb
-
SHA1
8c391e1ffafbb80140eeb9d6e868590461c9be33
-
SHA256
1855cf07becd0dad47619e11dbc12751139b44452a520aa92018a0f7396522bb
-
SHA512
cf4393381538fef88bcda8ba8e8056686b0085a3604cda3868b028e70437da9317ab4ec917bc982a0466847afe901be06fb61209abca98fbfffa09f35e31893f
-
SSDEEP
1536:D42GCqkUSar07kWqo2wtSW9i6408leqETy:D4/ClUlggZUi64PleqETy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 458d704fb0df5f2fcaaaa3bd348f4bcb_JaffaCakes118
Files
-
458d704fb0df5f2fcaaaa3bd348f4bcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
b508ecd3dfa3c830f9870c76a10af5e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
WriteFile
GetProcAddress
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
CompareStringW
CompareStringA
CloseHandle
GetProcessHeap
HeapFree
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetFilePointer
GetFileType
SetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetLastError
LCMapStringW
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA
wininet
InternetOpenA
InternetSetCookieA
InternetGetCookieA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetReadFile
InternetCrackUrlA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE