Static task
static1
Behavioral task
behavioral1
Sample
cfc6112254a69030521d0d2bba152d4d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cfc6112254a69030521d0d2bba152d4d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfc6112254a69030521d0d2bba152d4d_JaffaCakes118
-
Size
14KB
-
MD5
cfc6112254a69030521d0d2bba152d4d
-
SHA1
f7fe7f04ad0a4ce2a072aa56ecedfaea96bad2df
-
SHA256
e0cb31bb04ceb2f5d64debdc60a312981ee4b57444d1cb8d0dcea271e8fd315c
-
SHA512
9d2c7062da7d625e4ef84a31a423d12ada9f7d84274733dc8344fc8409ca71b14aae5dd991ba007c2619e70dc86dd4f5c377abfc729231d6769921ccdb9dab8b
-
SSDEEP
384:rIKA3Akfokfo0jMaTRMaTjDCs1Q3SuDX5WsdDPdIMJ0HqR1:rIKCfokfol1YDCs1Q3SuDXNWzHqv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfc6112254a69030521d0d2bba152d4d_JaffaCakes118
Files
-
cfc6112254a69030521d0d2bba152d4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce2dbad21dae6d13afee8b019baf665a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetModuleHandleA
GetStartupInfoA
GetLongPathNameA
WinExec
GetModuleFileNameA
lstrlenA
Sleep
ws2_32
gethostname
WSAStartup
WSACleanup
advapi32
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegSetValueExA
wininet
HttpSendRequestA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
msvcrt
sscanf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
atoi
strcat
strcpy
fclose
fflush
__setusermatherr
fwrite
memset
fopen
strrchr
??2@YAPAXI@Z
atol
??3@YAXPAX@Z
strncpy
strstr
strlen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE