Static task
static1
Behavioral task
behavioral1
Sample
4c0a4d9503c0f82b72e212df8d26e843_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c0a4d9503c0f82b72e212df8d26e843_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c0a4d9503c0f82b72e212df8d26e843_JaffaCakes118
-
Size
19KB
-
MD5
4c0a4d9503c0f82b72e212df8d26e843
-
SHA1
0565584beae7f473fd5b7d69039391d38253bc9f
-
SHA256
28a9f63077e3f56029a2b353778b1849c38313666d010ce40d6a94dda800f9fc
-
SHA512
f704b57a45f5ba715132120970b32d320bafd89f07a6353a41bf6e5253e6a211e7336a53497cd38679aef87d441fbacda65f26500449d0ac2ed42c907867c71e
-
SSDEEP
192:urqyyyR665ajlDoGxQoQQhuI1c/Q0oGxQooKf4HGxQhuI1c/Q0oGxQooKcPKojia:urVjajZHC3Hm2yDvlh5Jd39OJgoc51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c0a4d9503c0f82b72e212df8d26e843_JaffaCakes118
Files
-
4c0a4d9503c0f82b72e212df8d26e843_JaffaCakes118.exe windows:4 windows x86 arch:x86
7276a74b59de5761801b35c672c9ccb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameA
GetTempPathA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetProcAddress
GetModuleFileNameA
GetShortPathNameA
lstrlenA
Sleep
ws2_32
gethostname
WSAStartup
WSACleanup
advapi32
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegSetValueExA
wininet
HttpSendRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
msvcrt
atol
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
atoi
strcat
strcpy
__setusermatherr
fflush
??3@YAXPAX@Z
fwrite
memset
fopen
strrchr
??2@YAPAXI@Z
fclose
sscanf
_purecall
strlen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE