Static task
static1
Behavioral task
behavioral1
Sample
4ae0288f3264686c90c29ccd02136c21_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ae0288f3264686c90c29ccd02136c21_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ae0288f3264686c90c29ccd02136c21_JaffaCakes118
-
Size
169KB
-
MD5
4ae0288f3264686c90c29ccd02136c21
-
SHA1
a7c4fb5c67adb7e3d7422dfd4025307d2b0c02ba
-
SHA256
1f0bcc3070179eab61ad61011861d4404e81946c154357ad07cee7cd4fb2f6cc
-
SHA512
0d827bfef5a4e89960e8afebb4b174934a66ec35326aa00f9f711db5d2d72e29cde3443a69096ac4cae60d01f7a4799d767e5a9f1d58a612d72e1e44bd7ca86c
-
SSDEEP
3072:vJcK6FZVA+QZ3Jx4f0SmUJPlWRf2eGFyz4I8bhRo8qYn:vJcKEZ4ZZGf0SjJdeiyMI8bXo8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ae0288f3264686c90c29ccd02136c21_JaffaCakes118
Files
-
4ae0288f3264686c90c29ccd02136c21_JaffaCakes118.exe windows:4 windows x86 arch:x86
4658c1736a0ea4e232058a0b83692789
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetSystemTime
TerminateProcess
GetStartupInfoA
Sleep
Sleep
ReadFile
WaitForSingleObjectEx
WriteProcessMemory
SleepEx
CreateFileA
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
CreateFileA
WaitForSingleObject
WriteProcessMemory
DeviceIoControl
CreateFileA
WaitForSingleObject
SleepEx
VirtualProtectEx
CreateFileA
WaitForSingleObjectEx
winhttp
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCheckPlatform
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetOption
WinHttpSetOption
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
Sections
.text Size: 151KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ