Static task
static1
Behavioral task
behavioral1
Sample
4619408416ab166a8934d16db9543a00_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4619408416ab166a8934d16db9543a00_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4619408416ab166a8934d16db9543a00_JaffaCakes118
-
Size
83KB
-
MD5
4619408416ab166a8934d16db9543a00
-
SHA1
10dcac0b42d2a68415a21736354fe99053e66986
-
SHA256
4f2eadd1f8a3394bc0c3c08609c4953db53b675583651887059a39559a5f209d
-
SHA512
d0932f090033587ed6dbb9cea63b99f9fdfd10c4d12961480f8d8fc2de4351f0ea6b2fef450010335fc7797bdb50409e5bb0521a624aa1ca489794fe59f03038
-
SSDEEP
1536:mn0P4uvlCDcR3DRY78qH+pHi3kQFath8v66OewCflH/TUqve9jTu6xPo+3JmI2lR:DXtD3VYwqH+Zi0Q0/7CflHI4e95xTUIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4619408416ab166a8934d16db9543a00_JaffaCakes118
Files
-
4619408416ab166a8934d16db9543a00_JaffaCakes118.exe windows:5 windows x86 arch:x86
9cd3ed70ff2af150d457d1f3355e2130
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLDownloadToFileA
CoInternetCreateSecurityManager
URLOpenStreamA
user32
MessageBoxA
CallMsgFilterA
AdjustWindowRect
CreateIcon
wininet
InternetOpenA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA
Sections
.uxqr Size: 33KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fgf Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.glmj Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nkv Size: 44KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE