Static task
static1
Behavioral task
behavioral1
Sample
7601d3389b3a80f8a30521fbd86e79a3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7601d3389b3a80f8a30521fbd86e79a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7601d3389b3a80f8a30521fbd86e79a3_JaffaCakes118
-
Size
444KB
-
MD5
7601d3389b3a80f8a30521fbd86e79a3
-
SHA1
a64ff9d17e1148ee975ffcc66ef0c299e74885db
-
SHA256
8e6a2548f5841e4aebb708ffc66cb13661bbb095a72faf851f075d9e9009567c
-
SHA512
a5470d186aa2d36a341670b449a3d3bfa5a6493370df948680704f1a2fc32dcd04d7ce0a3dc06323fa2c9b953ed080e3e24daaa53d6d7ee1342367f23d376a32
-
SSDEEP
6144:r6dNvTF9oX2kqfq0Sql0rnuBTYWbijdiNRWZbGNA:r6jcqy0BbfgEN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7601d3389b3a80f8a30521fbd86e79a3_JaffaCakes118
Files
-
7601d3389b3a80f8a30521fbd86e79a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
4677d1b69bd6d7710b2026af6b1182fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
urlmon
URLDownloadToFileA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateProcessA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetThreadLocale
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WinExec
WriteFile
lstrcpynA
lstrlenA
gdi32
GetDeviceCaps
shell32
ShellExecuteA
user32
CharNextA
EnumThreadWindows
EnumWindows
FindWindowA
GetClassNameA
GetDC
GetKeyboardType
GetSystemMetrics
GetWindowThreadProcessId
LoadStringA
MessageBoxA
SendMessageA
SetWindowPos
ShowWindow
wsprintfA
oleaut32
SysFreeString
Sections
.nsp0 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE