Static task
static1
Behavioral task
behavioral1
Sample
c9172b3e83c782bc930c06b628f31fa5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c9172b3e83c782bc930c06b628f31fa5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9172b3e83c782bc930c06b628f31fa5_JaffaCakes118
-
Size
33KB
-
MD5
c9172b3e83c782bc930c06b628f31fa5
-
SHA1
748ec5cb1269101f0dec00374f7fe75fc85fdc4b
-
SHA256
bb43148b1f4cd37d4ee29a4b9ec2c147f3b705d7f543444dc44889076d312451
-
SHA512
07d1aa4651a218a2a79c7736043736c233b9cc2995ec184765a7a17059c091655db8bd0f4404dfd8deaf3d1d341317a53d2d512e5654c01cd4370e8fcb943fd3
-
SSDEEP
768:u6mCfedjLCsiHSmL2J4gW1nkxlZXkMoussU:u6mfLvQgW1kxlZjss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9172b3e83c782bc930c06b628f31fa5_JaffaCakes118
Files
-
c9172b3e83c782bc930c06b628f31fa5_JaffaCakes118.exe windows:4 windows x86 arch:x86
a1a42f57ff30983efda08b68fedd3cfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
GetComputerNameA
MultiByteToWideChar
CloseHandle
TerminateProcess
WriteFile
ReadFile
PeekNamedPipe
CreateProcessA
GetSystemDirectoryA
CreatePipe
GlobalFree
GetCurrentProcess
GetModuleFileNameA
LCMapStringA
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
CreateFileA
FlushFileBuffers
SetStdHandle
HeapReAlloc
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
winhttp
WinHttpWriteData
WinHttpSendRequest
WinHttpOpen
WinHttpConnect
WinHttpGetProxyForUrl
WinHttpQueryOption
WinHttpSetOption
WinHttpReceiveResponse
WinHttpReadData
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpGetIEProxyConfigForCurrentUser
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE