Static task
static1
Behavioral task
behavioral1
Sample
4a9596b7ecc7e054e65c1fb360f557f2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a9596b7ecc7e054e65c1fb360f557f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a9596b7ecc7e054e65c1fb360f557f2_JaffaCakes118
-
Size
20KB
-
MD5
4a9596b7ecc7e054e65c1fb360f557f2
-
SHA1
ed457ccc224e2c28dccdd896e3c13ecd7e7159e8
-
SHA256
2870571bc94afee24a229309d8d39507e18a721f2b119d746043109d3ec8fb18
-
SHA512
bb3a5d118e25507a9a1b3d2c0036dc4ceaba1b99851d5e15da95f134c10adac66a4f5cb05cdf16f8e128878951ba4adf9e99ce40ad380bec2047ab2003cd6f50
-
SSDEEP
384:Qwu0cmeGjUTAMV7hgXQY7rugrxGbpMAm0smNc3usnWRP1SLt:QGciM0trug0byAmlme3ZWRP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a9596b7ecc7e054e65c1fb360f557f2_JaffaCakes118
Files
-
4a9596b7ecc7e054e65c1fb360f557f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
504e1526d83a40b726a5973f03770192
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetErrorDlg
advapi32
InitializeSecurityDescriptor
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA
SetSecurityDescriptorDacl
user32
GetMessageA
PostThreadMessageA
GetDesktopWindow
msvcrt
_sleep
fwrite
fprintf
sprintf
free
strstr
atoi
_strupr
fscanf
strncpy
_snprintf
realloc
malloc
fflush
_filelength
_strdup
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strrchr
fopen
_filbuf
fclose
strtok
exit
strncmp
_exit
iphlpapi
GetAdaptersInfo
ws2_32
WSAStartup
gethostname
gethostbyname
inet_ntoa
WSACleanup
shell32
DoEnvironmentSubstA
shlwapi
PathFileExistsA
kernel32
SetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
GetModuleHandleA
GetStartupInfoA
GetLastError
DeleteFileA
GetVersionExA
CreateProcessA
GetComputerNameA
GetModuleFileNameA
Sleep
GetCurrentThreadId
CloseHandle
DeviceIoControl
CreateFileA
CreateMutexA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE