Static task
static1
Behavioral task
behavioral1
Sample
b60c940abff04e4d149e59c351534f8b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b60c940abff04e4d149e59c351534f8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b60c940abff04e4d149e59c351534f8b_JaffaCakes118
-
Size
20KB
-
MD5
b60c940abff04e4d149e59c351534f8b
-
SHA1
b42d9dcb12e2ce4a47e557f3b5e50832b6dfaabc
-
SHA256
7910ac39c6a34002152b066ecba3cb1c538bdb2e441f69f67ffaa0c3e7a72213
-
SHA512
dec8a74902da7e35bf3589d6517149354eeb68f88d5bdf934604270919a928ec7f459042b091fabadeb5a896e7f51cd1c96421c9b921f44c100e887c858d9b85
-
SSDEEP
192:YlLSWNSnWkHp/sktsLWCsYBIJXNsVsjvbDNA+NUoynyh4tOGO:YluWaW0NMWf8IJdaebDNA+agh4tO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b60c940abff04e4d149e59c351534f8b_JaffaCakes118
Files
-
b60c940abff04e4d149e59c351534f8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f8715a7a13a5500de365bef94034a517
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetErrorDlg
HttpSendRequestA
InternetReadFile
InternetCloseHandle
HttpQueryInfoA
HttpOpenRequestA
InternetOpenA
InternetConnectA
advapi32
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
user32
GetDesktopWindow
PostThreadMessageA
GetMessageA
shlwapi
PathFileExistsA
msvcrt
_strnicmp
strcat
fclose
fwrite
fopen
strtok
strncmp
strrchr
free
strstr
atoi
memset
realloc
malloc
strncpy
fflush
_filelength
exit
_exit
_strdup
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
strlen
_sleep
_XcptFilter
ws2_32
inet_ntoa
gethostbyname
gethostname
WSAStartup
WSACleanup
shell32
DoEnvironmentSubstA
psapi
EnumProcessModules
GetModuleBaseNameA
EnumProcesses
kernel32
Sleep
FindFirstFileA
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetLocalTime
CreateMutexA
GetModuleFileNameA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileAttributesA
DeleteFileA
GetLastError
GetVersionExA
OpenProcess
CreateProcessA
CloseHandle
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE