Static task
static1
Behavioral task
behavioral1
Sample
7433d0d2dfadacac96ef7ddd442dcada_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7433d0d2dfadacac96ef7ddd442dcada_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7433d0d2dfadacac96ef7ddd442dcada_JaffaCakes118
-
Size
475KB
-
MD5
7433d0d2dfadacac96ef7ddd442dcada
-
SHA1
a952b690711f7ce77085aa95b8aadd91466cdc27
-
SHA256
0fbdb3f17176066c165c1e4354677b96d8876f92abae11fd57b7d802bcbf390d
-
SHA512
f9e59a59fcad84f6dae42062e56f8b182036b97b0cd0b91b48c6e0745bdaac1d08b7380183adede2e70eb44ae2c850e267cc1fb3a2fab2baaa40331ab72c387f
-
SSDEEP
12288:04WgsD627E88GAF/slrSvIxUTPfJkvxxBht+vdt8TrK:09b7sGAFUYvvHEv+vdWi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7433d0d2dfadacac96ef7ddd442dcada_JaffaCakes118
Files
-
7433d0d2dfadacac96ef7ddd442dcada_JaffaCakes118.exe windows:4 windows x86 arch:x86
7fb3f8504cedbd79e5ec4710b1367985
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wininet
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
kernel32
AddAtomA
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
GetAtomNameA
GetFileAttributesA
Process32Next
ReadFile
SetUnhandledExceptionFilter
Sleep
WriteFile
msvcrt
_strcmpi
_strrev
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_vsnprintf
abort
atexit
atoi
atol
calloc
fflush
fprintf
free
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strlen
time
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 240B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE