Static task
static1
Behavioral task
behavioral1
Sample
46246ee2e3fb9efd29a96b356b043f8a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46246ee2e3fb9efd29a96b356b043f8a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46246ee2e3fb9efd29a96b356b043f8a_JaffaCakes118
-
Size
40KB
-
MD5
46246ee2e3fb9efd29a96b356b043f8a
-
SHA1
b9a2847f4102c8d766f043c522b711c87131f94a
-
SHA256
532dd432901ea71223d8cda96d35cd99ff91b9b6897ef087da84ebb1d50ac202
-
SHA512
359638bb00516fd908f61f5c150fa4c3e9dc8a443be89410c52d38349265761e8bafc123d73ce7ce36df015345c8c69bdd9142102a9e164285c2a3b4b2bf43e6
-
SSDEEP
384:bE2PVwBEbEy62YnRRmwC0/uEZDvAtJhvuwr46u6DRhpm56OovKthjqdWbu3QW:bE2PVEi0tRA0/uvPcofpm5ysqwu3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46246ee2e3fb9efd29a96b356b043f8a_JaffaCakes118
Files
-
46246ee2e3fb9efd29a96b356b043f8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
029ac217f4b8c438f03a046eca25eb92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoW
GetTimeZoneInformation
GetLocalTime
GlobalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
GlobalFree
GetModuleFileNameW
WaitForMultipleObjects
SetErrorMode
Sleep
GetVersionExW
CreateFileW
CreateWaitableTimerW
CancelWaitableTimer
CreateEventW
ExitThread
GetTickCount
SizeofResource
LoadResource
FindResourceExW
GetModuleHandleW
GetTempPathW
GetCurrentThreadId
GetTempFileNameW
GetStartupInfoW
WriteFile
CreateProcessW
CloseHandle
LoadLibraryW
SetWaitableTimer
GetProcAddress
SearchPathA
SetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
SetFileAttributesA
CreateFileA
GetFileSize
ExitProcess
SetFileTime
GetCommandLineA
lstrcpynA
GlobalUnlock
GlobalLock
CreateProcessA
GetTempFileNameA
lstrlenA
lstrcatA
GetVersion
ExpandEnvironmentStringsA
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
FreeLibrary
GetPrivateProfileStringA
ReadFile
MulDiv
FindClose
FindNextFileA
DeleteFileA
GetWindowsDirectoryA
user32
GetKeyboardLayoutList
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
PeekMessageW
CharToOemBuffA
advapi32
GetTokenInformation
OpenProcessToken
OpenThreadToken
AllocateAndInitializeSid
EqualSid
wininet
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
WSACleanup
WSAStartup
gethostbyname
dnsapi
DnsRecordListFree
DnsNameCompare_W
msvcrt
swscanf
strtok
sscanf
??3@YAXPAX@Z
_controlfp
_except_handler3
__set_app_type
??2@YAPAXI@Z
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
time
_wstrtime
_wstrdate
exit
malloc
wcslen
free
swprintf
wcscmp
_beginthreadex
realloc
wcsncpy
wcscat
wcscpy
_wstat
mbstowcs
wcstombs
_c_exit
sprintf
_setmode
_iob
isxdigit
islower
isspace
__getmainargs
__initenv
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ