Static task
static1
Behavioral task
behavioral1
Sample
671a518b4c24184057d8ecb3fafc02d0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
671a518b4c24184057d8ecb3fafc02d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
671a518b4c24184057d8ecb3fafc02d0_JaffaCakes118
-
Size
91KB
-
MD5
671a518b4c24184057d8ecb3fafc02d0
-
SHA1
f9fdbb75b40dc2da213a80922083b08745ef0a45
-
SHA256
c797548b5db11f3b8c073550c7e6023e994aa6818a45e509f098a5d77603f4d5
-
SHA512
8c1904d2d1c06fb9db05669cdeb2b15556e43fa07d04538d776bf98fc462400d18ccf4f85c87c6ad4d506c5322fc22e026a1d3bda0775f9fdfacf01f51485d54
-
SSDEEP
1536:wTXMQ/DNW0Go2ulOEj6lYC3cTEI72/mIF2:aMQJW0c1Ej6lYC3T32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 671a518b4c24184057d8ecb3fafc02d0_JaffaCakes118
Files
-
671a518b4c24184057d8ecb3fafc02d0_JaffaCakes118.exe windows:1 windows x86 arch:x86
6b3a7791025a1e099490ca62ee40c938
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetDriveTypeA
GetFileTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
CopyFileA
OpenProcess
Process32First
Process32Next
CreateFileA
RtlUnwind
RtlZeroMemory
SetFileAttributesA
SetFilePointer
SetFileTime
Sleep
SystemTimeToFileTime
TerminateProcess
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
CreateToolhelp32Snapshot
DeleteFileA
user32
SystemParametersInfoA
MessageBoxA
wsprintfA
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
crtdll
__GetMainArgs
exit
_beginthread
raise
rand
signal
sprintf
strchr
strcmp
strcpy
strlen
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE