Static task
static1
Behavioral task
behavioral1
Sample
486d2d7088a909d0b0232b6de4c06f07_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
486d2d7088a909d0b0232b6de4c06f07_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
486d2d7088a909d0b0232b6de4c06f07_JaffaCakes118
-
Size
8KB
-
MD5
486d2d7088a909d0b0232b6de4c06f07
-
SHA1
8404e7a6ff96ac4c691dc3a3bde1fb59c7d9bf24
-
SHA256
801a139fe92acd6e5e90997b104d3d11573d3129591cc99c90fa9d8baac0356c
-
SHA512
84199b5622f65424040d2cadf0b5f9c97ae7e762f50f3a31b81842eb80d2ffb6cd71237bc4a55cd45e96386437a316f438bd1d62c2a583ba0a233eb397d0c611
-
SSDEEP
192:6jMrDpWGwS2Zh6FntWSdbfnuhalLk0CoQUN3vP1oy2:6UrwS2L6FnppmzGJH1k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 486d2d7088a909d0b0232b6de4c06f07_JaffaCakes118
Files
-
486d2d7088a909d0b0232b6de4c06f07_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ba642f8f03561a9eb63795e1ec9b5d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
GetSystemWindowsDirectoryA
CreateFileA
CreateDirectoryA
DeleteFileA
GetTempFileNameA
GetCurrentDirectoryA
GetTempPathA
CloseHandle
WriteFile
TerminateThread
WaitForSingleObject
CreateThread
GetVersionExA
GetFileSize
MoveFileExA
CreateProcessA
GetStartupInfoA
SetUnhandledExceptionFilter
SetErrorMode
GetCommandLineA
GetLastError
GetModuleHandleA
msvcrt
memset
memcpy
strlen
free
malloc
_snprintf
_except_handler3
atol
_exit
_XcptFilter
exit
strchr
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_acmdln
ws2_32
inet_addr
gethostname
gethostbyname
inet_ntoa
WSAStartup
iphlpapi
GetInterfaceInfo
GetAdapterIndex
GetAdaptersInfo
GetBestInterface
wininet
InternetCrackUrlA
InternetCloseHandle
InternetConnectA
HttpOpenRequestA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
InternetErrorDlg
InternetOpenA
InternetQueryOptionA
Sections
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ