Static task
static1
Behavioral task
behavioral1
Sample
a672f665fad80bae6806c809b7e7e4bb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a672f665fad80bae6806c809b7e7e4bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a672f665fad80bae6806c809b7e7e4bb_JaffaCakes118
-
Size
56KB
-
MD5
a672f665fad80bae6806c809b7e7e4bb
-
SHA1
6985ec442bbf1ae57f4a04a83a3aa013177a3ac6
-
SHA256
984ea346b055049ea041c04d428ef1aa990599183fc6266ab99f202ab9b3917d
-
SHA512
c348cbfb39aaff6461453490f69a056d8fb675d4ed6cf144900addda1cb5659f5c653804473ea202dce3fc29d3f55d73d835bc5354e96bfb2ec910d32663447b
-
SSDEEP
768:/ahyJx55bIVaBvozlAAfJp4xFP6Gxng78tDe:/GyJ35bIIEAKJNGxg7W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a672f665fad80bae6806c809b7e7e4bb_JaffaCakes118
Files
-
a672f665fad80bae6806c809b7e7e4bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
6db1377d7f4f2a9253bc8304df3f5329
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetSystemTime
FreeLibrary
LoadLibraryA
GetPrivateProfileStringA
lstrcpynA
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerA
GetModuleHandleA
GetVersionExA
WriteFile
ReadFile
CreateFileA
SetEndOfFile
IsBadCodePtr
GetProcAddress
SetLastError
CreateMutexA
GetLastError
ReleaseMutex
CloseHandle
FlushFileBuffers
SetStdHandle
InterlockedExchange
GetLocaleInfoA
HeapFree
RtlUnwind
HeapAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
GetACP
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
SetFilePointer
advapi32
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ