Static task
static1
Behavioral task
behavioral1
Sample
88466fc1ada5caf51933e8e53d5a93c2_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
88466fc1ada5caf51933e8e53d5a93c2_JaffaCakes118
-
Size
1.3MB
-
MD5
88466fc1ada5caf51933e8e53d5a93c2
-
SHA1
b7857ee689ff62f2ade83b890e8abdd5f3b08d12
-
SHA256
4c1d34d6c5571f1a4088baf07d6a1bc6ebec564df816aa5990333a749a87e09d
-
SHA512
943eff744aab20eda45fe331999b8550678458139001840e76f1c5f5d6de87380937f67a63fb1b57fce5a410a146179e87aa371f787dd32a27507e75c50c0598
-
SSDEEP
12288:IdIu5bmgP4rrXI183fNyeZG+g13gwGHoy8+pJRsA56XIdBK9MdbvvNVRm6Wjxi:ID5bwbIG1A+ceHoydXRqyYADvzRkI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88466fc1ada5caf51933e8e53d5a93c2_JaffaCakes118
Files
-
88466fc1ada5caf51933e8e53d5a93c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
9da8da33c085107018b65513011ff58a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
wsock32
WSACleanup
shell32
ShellExecuteExA
ole32
CoTaskMemFree
urlmon
URLDownloadToFileA
comctl32
_TrackMouseEvent
wininet
InternetOpenUrlA
winmm
waveInUnprepareHeader
rasapi32
RasGetEntryDialParamsA
netapi32
Netbios
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
avicap32
capGetDriverDescriptionA
shfolder
SHGetFolderPathA
gdiplus
GdipGetImageEncoders
ws2_32
WSAIoctl
msacm32
acmStreamUnprepareHeader
pstorec
PStoreCreateInstance
url
InetIsOffline
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE