Static task
static1
Behavioral task
behavioral1
Sample
853a92d2233b09855934553a1fc0d527_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
853a92d2233b09855934553a1fc0d527_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
853a92d2233b09855934553a1fc0d527_JaffaCakes118
-
Size
165KB
-
MD5
853a92d2233b09855934553a1fc0d527
-
SHA1
c7e81e512290bf387e0884b3c72547554279aec1
-
SHA256
e57e7de1436805037bb073de2582e3b583e27b3a63f1f09d298050abd201dd72
-
SHA512
0c32121726e76c68ea3c5874c7f7b74786b965379571daec582ccb2f0245454dc3c74dfd7310dfa6c51771ee00735f15ae04c0744e1585119b0eee203284e4eb
-
SSDEEP
3072:BSTwUm/VXzz3itg6HFCyD2Gf9HHdy31nV7cXHFjVkvRwCRRqVFZowNxn:2wUmdDz3C1cMf1H9y3hs530qTZowNh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 853a92d2233b09855934553a1fc0d527_JaffaCakes118
Files
-
853a92d2233b09855934553a1fc0d527_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e596615d40657f09a2b57bee60cdc8a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
GetStartupInfoA
VirtualProtectEx
TerminateProcess
ReadProcessMemory
GetSystemTime
LoadLibraryExW
CreateFileA
LoadLibraryExW
CreateFileA
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
Sleep
DeviceIoControl
SleepEx
LoadLibraryA
WriteProcessMemory
VirtualProtectEx
LoadLibraryA
LoadLibraryA
WaitForSingleObject
CreateProcessA
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCheckPlatform
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
Sections
.text Size: 151KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ