Static task
static1
Behavioral task
behavioral1
Sample
ab7b715fc32b384bd7d3d4c191a1350a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab7b715fc32b384bd7d3d4c191a1350a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab7b715fc32b384bd7d3d4c191a1350a_JaffaCakes118
-
Size
48KB
-
MD5
ab7b715fc32b384bd7d3d4c191a1350a
-
SHA1
54e01ca09fcf1bb1e6fef881a2328d4803997d3d
-
SHA256
d4fb4c11e2099a60d7143ee6ee727c45880d73741ee6470a5ac89ecb7d181d3b
-
SHA512
ab95b559be6bfcba4ee11e66d00171f74adcc52fcf5d97bce04210c515e6e5882a4897149d01a8e09aa0174da7380f140fe8f1be2f75973fbd1f43c8dd4f5abc
-
SSDEEP
384:JAFyhhh2x9dmHgy98seYmlgyw1CYEmCSHZrwH8EfpyDXkyp7z3F0j9X9YlHMsMN2:L8CACReRgxExJHEkG0j9XCHMsaM/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab7b715fc32b384bd7d3d4c191a1350a_JaffaCakes118
Files
-
ab7b715fc32b384bd7d3d4c191a1350a_JaffaCakes118.exe windows:4 windows x86 arch:x86
24fcff60bff86e3cb3c740cd982ee101
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetSystemDirectoryA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
CreateFileA
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
SetFilePointer
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
WriteFile
CloseHandle
lstrlenA
GetComputerNameA
HeapReAlloc
GetTickCount
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
CreateDirectoryA
GetEnvironmentStrings
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
user32
CreateWindowExA
wsprintfA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
GetMessageA
EndPaint
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
PostQuitMessage
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
wininet
InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
netapi32
Netbios
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ