Static task
static1
Behavioral task
behavioral1
Sample
b30321ea3b1b97efcaf267cbc6f126a5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b30321ea3b1b97efcaf267cbc6f126a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b30321ea3b1b97efcaf267cbc6f126a5_JaffaCakes118
-
Size
31KB
-
MD5
b30321ea3b1b97efcaf267cbc6f126a5
-
SHA1
448c5345ec626ebc9e35f5d4ef3e18aeec869b9f
-
SHA256
efa509a03d6d724050a12c0da13408ee031acd2886f6273d37982c0a9cb45254
-
SHA512
2688351ca342de65309b7d1a4bd49a1e17724d7c002d6112ba2f6d7082d38fdbfd5ecf61f62e3f75c35ce30f7e2b141cec117f006992502cc5fe4ffc829b3c8e
-
SSDEEP
384:wX2PzDpnS/oJQp5BTmgMPApqysq7fG/cObdZzpmYnieh0D4OTvqx4ThenoL9c+Ac:73pnSQCp5AopqHq78LbdxhxOqKAnoLmK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b30321ea3b1b97efcaf267cbc6f126a5_JaffaCakes118
Files
-
b30321ea3b1b97efcaf267cbc6f126a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
634ddb5f43a7f6a689d52cb263291f97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
FindClose
FindNextFileA
FileTimeToSystemTime
FindFirstFileA
CreateThread
CreateMutexA
lstrcmpA
GetSystemDefaultLangID
OpenMutexA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetStartupInfoA
GetLastError
GetCommandLineA
lstrcmpiA
CloseHandle
WaitForSingleObject
lstrcpynA
GetModuleFileNameA
SystemTimeToFileTime
MultiByteToWideChar
CreateDirectoryA
GetSystemDirectoryA
lstrlenA
lstrcpyA
Sleep
CreateProcessA
WriteFile
SetEndOfFile
GetModuleHandleA
SetFileTime
CreateFileA
GetVersionExA
GetFileSize
ReadFile
CopyFileA
user32
GetClientRect
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
DialogBoxParamA
MessageBoxA
PostMessageA
GetMessageA
DispatchMessageA
wsprintfA
SendMessageA
FindWindowExA
GetDlgItem
EnableWindow
EndDialog
GetSystemMetrics
MoveWindow
SetWindowPos
ShowWindow
CreateWindowExA
GetDesktopWindow
ole32
CoCreateInstance
CoInitialize
wininet
InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
InternetQueryOptionA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ