Static task
static1
Behavioral task
behavioral1
Sample
a93a7fce875eff42ce12c348f4fd30a3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a93a7fce875eff42ce12c348f4fd30a3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a93a7fce875eff42ce12c348f4fd30a3_JaffaCakes118
-
Size
413KB
-
MD5
a93a7fce875eff42ce12c348f4fd30a3
-
SHA1
4a7cea0ec1e8a8fa8c65f58617ed62d6654a4dc1
-
SHA256
c07575de9403706ad5aa6a68e5477d9288018fc57ef4968cc6d7285cc2f2aba1
-
SHA512
8d33630f216582786feec4f3cf2df821faa696b54f8c89e84b7e359b0c43dfcfa566dc94f81966e0b192e49799888deaaf2203ec1422c2d1e92a1d64aac7b7e6
-
SSDEEP
12288:fwTA8CjD5eQ66xZY91M4oTBR7DJrkPyyXFECMKJxw:YlmD5eQRxp4IB9JIPZXF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a93a7fce875eff42ce12c348f4fd30a3_JaffaCakes118
Files
-
a93a7fce875eff42ce12c348f4fd30a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2a801fbc45908ed7c335101c4b24306
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetFileType
TlsSetValue
GetDateFormatA
RtlUnwind
LCMapStringW
GetCurrentThread
GetCurrentProcess
InterlockedIncrement
VirtualAlloc
WideCharToMultiByte
TlsFree
HeapReAlloc
HeapDestroy
EnterCriticalSection
HeapCreate
GetOEMCP
VirtualFree
GetModuleFileNameA
GetStdHandle
LCMapStringA
ExitProcess
GetTimeFormatA
IsValidLocale
SetConsoleCtrlHandler
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
IsDebuggerPresent
GetModuleHandleW
SetLastError
QueryPerformanceCounter
DeleteCriticalSection
Sleep
GetACP
VirtualQuery
GetCurrentThreadId
GetLocaleInfoW
HeapAlloc
InitializeCriticalSectionAndSpinCount
HeapFree
CompareStringA
WriteFile
GetCurrentProcessId
GetCommandLineA
LeaveCriticalSection
IsValidCodePage
WriteProfileStringW
SetHandleCount
GetLocaleInfoA
GetTimeZoneInformation
MultiByteToWideChar
GetStartupInfoA
TlsAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetModuleHandleA
EnumSystemLocalesA
GetStringTypeW
GetCPInfo
CompareStringW
InterlockedDecrement
FreeLibrary
FreeEnvironmentStringsW
GetLastError
SetEnvironmentVariableA
GetProcAddress
GetUserDefaultLCID
HeapSize
GetEnvironmentStringsW
TlsGetValue
InterlockedExchange
SetUnhandledExceptionFilter
TerminateProcess
wininet
InternetGoOnline
FtpGetCurrentDirectoryW
ResumeSuspendedDownload
InternetErrorDlg
InternetReadFile
InternetQueryFortezzaStatus
InternetSecurityProtocolToStringW
FtpCreateDirectoryA
CreateUrlCacheContainerW
InternetTimeToSystemTime
GopherFindFirstFileA
InternetConfirmZoneCrossingA
InternetSecurityProtocolToStringA
InternetCrackUrlA
InternetOpenUrlA
RunOnceUrlCache
HttpQueryInfoW
GopherGetAttributeW
InternetSetDialStateW
InternetGetConnectedStateEx
InternetAttemptConnect
user32
EnumWindows
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ