Static task
static1
Behavioral task
behavioral1
Sample
a4ddeb61639f40a3454006f9dd7abc6a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4ddeb61639f40a3454006f9dd7abc6a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4ddeb61639f40a3454006f9dd7abc6a_JaffaCakes118
-
Size
293KB
-
MD5
a4ddeb61639f40a3454006f9dd7abc6a
-
SHA1
3c5cca4383cfc0836d8aba2de21504cd0469a141
-
SHA256
decc9b0d3a7ed53224dc270ca34cf14b67295d03ee09042a9be10eb4f83e6249
-
SHA512
26c50354ec53e6b58bd4c6718e3feb7bcbe6ebf337c8945f9cb20a8331bd49af1148f0f538418db7124487ca546d09395445eb0ba845f172811ec5d03b2d249c
-
SSDEEP
6144:IKr5cYUtuSq2Sy7hLfB7LC+IzBJGyIHiM9pZslcr+S:I2Um2SwBC+Izjw9YcL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4ddeb61639f40a3454006f9dd7abc6a_JaffaCakes118
Files
-
a4ddeb61639f40a3454006f9dd7abc6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c16af3f1adbf4617d1c5b744022b144
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Heap32ListFirst
Module32First
VirtualProtect
CreateFileA
WriteFile
VirtualFree
Sleep
VirtualAlloc
Heap32First
user32
GetMessagePos
PostMessageA
wininet
InternetCloseHandle
FtpPutFileA
ole32
CoInitializeEx
OleInitialize
CoInitialize
advapi32
RegQueryValueA
RegQueryValueExA
RegEnumValueA
Sections
pQHMAlld Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FRVcGBkN Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DXfFzsTj Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RPgrnVsM Size: 258KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE