Static task
static1
Behavioral task
behavioral1
Sample
6335a9ec62593ea10006415b12c6df40_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6335a9ec62593ea10006415b12c6df40_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6335a9ec62593ea10006415b12c6df40_JaffaCakes118
-
Size
401KB
-
MD5
6335a9ec62593ea10006415b12c6df40
-
SHA1
1cf22be61d819ee3535847f58699052dd88c3a65
-
SHA256
406993fc5cf848fbab3c9205bd402bfdf7653b0824267f1922240baf8d34f56b
-
SHA512
0c0052404a428bf03ddc25b73d692ead0fce0a58bcf5ba636acff872f7ad067e770578ec928bac7dafb9caf4d234f79897c4d4c5e8bf153ab07f99edaf04d6da
-
SSDEEP
6144:gx1zL+plxr4/PDjvDv6rp9uIFswDnJ4V1OViHnHiHqh9OnH14GIaEQaqv+T8ya/F:CzyJIX7v6rTn2oNViHWwOnH1dJt/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6335a9ec62593ea10006415b12c6df40_JaffaCakes118
Files
-
6335a9ec62593ea10006415b12c6df40_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbc3528856650e85802e6f29d2e0f69d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallMsgFilterW
PostThreadMessageA
GetMessageA
TranslateMessage
CharNextA
RegisterWindowMessageA
DispatchMessageA
kernel32
VirtualAlloc
ExitProcess
advapi32
ImpersonateLoggedOnUser
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RevertToSelf
OpenThreadToken
RegCreateKeyExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegNotifyChangeKeyValue
RegSetValueExA
cfgmgr32
CM_Dup_Range_List
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
urlmon
CoInternetParseUrl
CopyBindInfo
CoInternetGetSession
UrlMkSetSessionOption
shlwapi
StrCatBuffW
wininet
InternetCrackUrlA
InternetCombineUrlA
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE