Static task
static1
Behavioral task
behavioral1
Sample
d054d7537906c73a961b3e78ac276dd4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d054d7537906c73a961b3e78ac276dd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d054d7537906c73a961b3e78ac276dd4_JaffaCakes118
-
Size
455KB
-
MD5
d054d7537906c73a961b3e78ac276dd4
-
SHA1
32ddecba10f4768943b8345372687c04ebbd0a2e
-
SHA256
3327dfaf59b4a89c4461ca423326f4990526001c2cab07786e4928dd2315523c
-
SHA512
666ff995e08f166b10eff97013a11489e1e471ce396cc0a18023b6b43167bc759b204dce1c1485832675ca1af83c7a7ce47f259a804189d5496caf3df4983415
-
SSDEEP
12288:j7S0+tIuUGsIe7W2FevFcMMnMMMMMdie6Rh6i5sY:jG0+tNUlW2FtMMnMMMMMwe66i6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d054d7537906c73a961b3e78ac276dd4_JaffaCakes118
Files
-
d054d7537906c73a961b3e78ac276dd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
372d418fd1b2abac326f7854ea0d7a0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCatBuffW
kernel32
VirtualAlloc
CreateFileA
wininet
InternetCombineUrlA
InternetCrackUrlA
activeds
ADsGetObject
user32
wsprintfA
CharNextA
TranslateMessage
DispatchMessageA
GetMessageA
CallMsgFilterW
PostThreadMessageA
urlmon
UrlMkSetSessionOption
CopyBindInfo
CoInternetGetSession
CoInternetParseUrl
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
advapi32
RegQueryValueExA
RegCreateKeyExA
RegEnumValueA
RegNotifyChangeKeyValue
ImpersonateLoggedOnUser
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
OpenThreadToken
RegSetValueExA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA
RevertToSelf
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ