Static task
static1
Behavioral task
behavioral1
Sample
c26a70115e4af7561cb59a22f9fe430b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c26a70115e4af7561cb59a22f9fe430b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c26a70115e4af7561cb59a22f9fe430b_JaffaCakes118
-
Size
340KB
-
MD5
c26a70115e4af7561cb59a22f9fe430b
-
SHA1
2b48d0bccdda98a7cb473bf1f5e2afa1149fbc4f
-
SHA256
12d165f846f4cb793556e451b05c29bc4ce94a00a4dfb6002f2e5039d37fc0de
-
SHA512
144a10264f84f703ec65b3f3b36db21c8954245fc10fbcecb44748214ace3fa95e7078c05b5d980efdc91c9dd1e5f5213caaa82d3d9745d3858c03ec45edaedf
-
SSDEEP
3072:QAoLpI1N3YhXC6P4U4V5DXjuIcdRAzikfFk1nKTvhDZNQkUU:QAGpI1N3tPV57S1AzzfqKjak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c26a70115e4af7561cb59a22f9fe430b_JaffaCakes118
Files
-
c26a70115e4af7561cb59a22f9fe430b_JaffaCakes118.exe windows:4 windows x86 arch:x86
72c2e24a4f62a6eb5299fc48adb57e35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlA
HttpQueryInfoA
FtpOpenFileA
InternetReadFile
FtpFindFirstFileA
InternetFindNextFileA
FtpSetCurrentDirectoryA
InternetConnectA
InternetCloseHandle
InternetOpenA
comctl32
ord17
kernel32
CreateFileA
ReadFile
SetFilePointer
WriteFile
SetFileAttributesA
GetFileAttributesA
WaitForSingleObject
CreateMutexA
DeleteFileA
CreateThread
CreateProcessA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetProcAddress
HeapSize
GetCurrentProcess
TerminateProcess
HeapReAlloc
RaiseException
HeapFree
CloseHandle
LCMapStringW
GetFileSize
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
FlushFileBuffers
HeapAlloc
ExitProcess
RtlUnwind
GetLastError
MoveFileA
CreateDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
user32
DestroyWindow
LoadIconA
RegisterClassA
LoadCursorA
DefWindowProcA
PostQuitMessage
BeginPaint
EndPaint
ReleaseDC
GetDC
EndDialog
DialogBoxParamA
LoadStringA
MessageBoxA
SetFocus
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
gdi32
GetStockObject
CreateCompatibleDC
DeleteDC
BitBlt
SelectObject
GetCurrentObject
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ