Static task
static1
Behavioral task
behavioral1
Sample
5efdbaf9b958a0d3392d72aaaa9bf7ca_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5efdbaf9b958a0d3392d72aaaa9bf7ca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5efdbaf9b958a0d3392d72aaaa9bf7ca_JaffaCakes118
-
Size
175KB
-
MD5
5efdbaf9b958a0d3392d72aaaa9bf7ca
-
SHA1
1b24212f69b96a9c332f3bcc5b0ff57a10679bc6
-
SHA256
a9217bd0b61a25764b5afe799bfe88bef12284bb802ef5554138595da950a4ca
-
SHA512
d7f49c8f85e04d365d22b98068505f33e0c274ed7368f03c568d6ea3619a2f7495d937e85e55ec59a29a3db8951bf66f2b7804145a8e68bb7a788b4dcc730339
-
SSDEEP
3072:soduZ0p7u0HhXn5SXoZNLLXsif4z+j49K0oCrtms/EtAdIg2XS0tTn5:rkZq52YLs64zD9hoCJ5/faXSq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5efdbaf9b958a0d3392d72aaaa9bf7ca_JaffaCakes118
Files
-
5efdbaf9b958a0d3392d72aaaa9bf7ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
31fb625b44ea78dc617fd20b18bfdc55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
oleacc
LresultFromObject
CreateStdAccessibleObject
shlwapi
PathAddBackslashA
kernel32
FindResourceExW
GetFileType
GetAtomNameW
GetVolumeInformationA
GetVersionExA
GetFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetFileAttributesW
EnumResourceNamesA
FileTimeToLocalFileTime
UnlockFile
IsDBCSLeadByte
LockFile
TzSpecificLocalTimeToSystemTime
CompareStringA
SearchPathA
SetEndOfFile
FlushFileBuffers
GetProfileStringA
GetSystemDirectoryA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ