Static task
static1
Behavioral task
behavioral1
Sample
d0b5962b4b10410c3c6286d2ccacec3c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0b5962b4b10410c3c6286d2ccacec3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0b5962b4b10410c3c6286d2ccacec3c_JaffaCakes118
-
Size
39KB
-
MD5
d0b5962b4b10410c3c6286d2ccacec3c
-
SHA1
eac3a6e962ce6872c3774a3a2304400558b17f90
-
SHA256
133b3c8b2415de5252931250ff628af029f91b2c80f6452460848a5f53cee5d9
-
SHA512
0551ab4473e2f7d4dd55c4d412429efaf60cf124db7fb3e1c5fbfa09fbe2ce6c29ad7b5252c03b4d7f81676082e119530310358ba449da1a879e2b4e2dbe2e66
-
SSDEEP
384:Bin4JiEzfiEOx2KelzOtEj199999999999999999999999999999999s:q/EzfcYzOSJs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b5962b4b10410c3c6286d2ccacec3c_JaffaCakes118
Files
-
d0b5962b4b10410c3c6286d2ccacec3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f92853a74faed7466fce8d7d7eb1198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord541
ord6143
ord801
ord858
ord2818
ord535
ord537
ord939
ord860
ord800
ord2915
ord5572
ord823
ord825
ord5861
ord540
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
rand
time
localtime
mktime
_mbscmp
__CxxFrameHandler
sprintf
__getmainargs
kernel32
GetWindowsDirectoryA
OpenMutexA
CreateMutexA
GetSystemDirectoryA
GetTempPathA
FlushFileBuffers
SetFileTime
SystemTimeToFileTime
GetSystemTime
CloseHandle
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
shell32
ShellExecuteExA
wininet
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCrackUrlA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE