Static task
static1
Behavioral task
behavioral1
Sample
9feb8f690337182fcb8eb972004eb3d3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9feb8f690337182fcb8eb972004eb3d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9feb8f690337182fcb8eb972004eb3d3_JaffaCakes118
-
Size
108KB
-
MD5
9feb8f690337182fcb8eb972004eb3d3
-
SHA1
21257fc2c9f674a5e27253aa75861626c1b341ec
-
SHA256
40c5ac179704934673d7d1bd78d714ebc69b7d11e3e8253ba4e9030c2f9c6821
-
SHA512
89adfd313a2f3a71d0120f8569de1d527fa120448a43649a312c908ed15c695217216dc8c5868ec26f364ed9bc8cece0add98f114a171525a480e4471d68e2b0
-
SSDEEP
1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlwqZEnP:zozVZvJm01mBLEnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9feb8f690337182fcb8eb972004eb3d3_JaffaCakes118
Files
-
9feb8f690337182fcb8eb972004eb3d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3fe98783c971443e9a7e6cadf916a81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpQueryInfoW
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetOpenUrlA
InternetCanonicalizeUrlW
InternetReadFile
ole32
CoInitialize
CoCreateInstance
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ws2_32
gethostbyname
WSAStartup
WSACleanup
shlwapi
PathGetCharTypeW
kernel32
LoadLibraryA
ReadFile
GetFileSize
CreateFileMappingA
MapViewOfFile
RtlMoveMemory
RtlZeroMemory
VirtualProtect
lstrcmpA
lstrcpynA
lstrlenA
LockResource
LoadResource
CreateProcessA
lstrcatA
Sleep
GetVersionExA
ExitProcess
CloseHandle
GetModuleFileNameA
GetDiskFreeSpaceExA
CreateDirectoryA
CreateFileA
SystemTimeToFileTime
GetSystemTime
CreateMutexA
MoveFileA
DeleteFileA
OutputDebugStringA
CopyFileA
GetWindowsDirectoryA
lstrcpyA
MulDiv
FlushFileBuffers
WriteFile
SetFilePointer
GetLastError
ExitThread
TerminateThread
CreateThread
SizeofResource
FreeLibrary
RtlUnwind
CompareStringA
InterlockedExchange
GetModuleHandleA
GetSystemDirectoryA
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA
GetCommandLineA
UnmapViewOfFile
GetTickCount
user32
CharLowerA
SendMessageA
GetDlgItem
CreateDialogParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetDlgItemTextA
GetDlgItemTextA
SetFocus
GetDC
InvalidateRect
SetWindowPos
ShowWindow
SetForegroundWindow
IsWindowVisible
EnableMenuItem
GetSystemMenu
gdi32
CreateFontIndirectA
GetDeviceCaps
advapi32
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
OpenSCManagerW
RegFlushKey
RegOpenKeyExA
CloseServiceHandle
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ