Static task
static1
Behavioral task
behavioral1
Sample
a5ae9ccb46c0a0b4f4aa322861089efa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5ae9ccb46c0a0b4f4aa322861089efa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5ae9ccb46c0a0b4f4aa322861089efa_JaffaCakes118
-
Size
75KB
-
MD5
a5ae9ccb46c0a0b4f4aa322861089efa
-
SHA1
f4a25df1f6fd22bfc586a2f230ec467964fabb95
-
SHA256
3751d20faf10fe68291530041e88253d6a7a55e94b43488e684fea07dbfade89
-
SHA512
089b69c7a0bd400836e4e6f7a33108af1212f5be4d0d95de7e2b833afeb59c0aadb4d879ae00a9e4beddaca3e1be2a38fc03073a873a945369111e115c318f2d
-
SSDEEP
1536:P9Lq7yrhmKSFAwznOVdKkdAqEjPFU7Ty5x:PBq7WQdTznOSkd7kW7A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5ae9ccb46c0a0b4f4aa322861089efa_JaffaCakes118
Files
-
a5ae9ccb46c0a0b4f4aa322861089efa_JaffaCakes118.exe windows:4 windows x86 arch:x86
3415e8d6211cdddf150495a5c4761b39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DeviceIoControl
CreateFileA
GetVolumeInformationA
lstrcpyA
GetWindowsDirectoryA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
IsBadWritePtr
GetComputerNameA
WriteFile
lstrlenA
GetCurrentProcessId
GetFileType
lstrcatA
GetVersionExA
GetSystemDirectoryA
Sleep
GetTempPathA
CreateProcessA
user32
wsprintfA
GetDlgItem
shell32
ShellExecuteExA
SHChangeNotify
msvcrt
sprintf
atol
_except_handler3
strncpy
rand
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
strstr
srand
time
strncat
_strdup
atoi
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
shlwapi
PathGetDriveNumberA
wininet
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
Sections
.text Size: 72KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ