Static task
static1
Behavioral task
behavioral1
Sample
d0c6bc70af2ef022c079334dbde204a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0c6bc70af2ef022c079334dbde204a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0c6bc70af2ef022c079334dbde204a0_JaffaCakes118
-
Size
264KB
-
MD5
d0c6bc70af2ef022c079334dbde204a0
-
SHA1
92e9ef8c4db56a7c02a50d4b63fd8950eb0b450d
-
SHA256
b1bf45b53e99a470bfba7316c8af18a99b828023a6e89fd1904a0db0239d8834
-
SHA512
1befaaf0fc95353a7c1bf70ac2761917c7d5dbac3cb3280fee329e75480c64685fbe3d8982f9b39f6e0b744d550bf805c3510cc679d83adc24b2b46515472d2d
-
SSDEEP
1536:qVulxo0o8t8gqFkttETXx2/L5YgTsqPemj3TkOl1keXSVz4oG:Es4w/4rx2VDVmmj3TPPSVz4oG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0c6bc70af2ef022c079334dbde204a0_JaffaCakes118
Files
-
d0c6bc70af2ef022c079334dbde204a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f8811cc5daee1f2eebed25fa9903fbf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
GetModuleHandleA
GetLastError
OutputDebugStringA
CloseHandle
HeapFree
HeapAlloc
GetProcessHeap
WriteFile
CreateFileA
ReadFile
SetEvent
LocalFree
GetFileSize
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
SetFilePointer
GetModuleFileNameA
GetPrivateProfileStringA
WaitForSingleObject
GetLocalTime
SetConsoleCtrlHandler
VirtualAlloc
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
InterlockedDecrement
GetProcAddress
LoadLibraryA
InterlockedIncrement
TerminateProcess
GetCurrentProcess
user32
DispatchMessageA
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
TranslateMessage
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
wininet
InternetOpenA
HttpSendRequestA
InternetAttemptConnect
InternetCloseHandle
InternetSetCookieA
HttpAddRequestHeadersA
HttpOpenRequestA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpQueryInfoA
InternetReadFile
InternetSetStatusCallback
InternetConnectA
FtpOpenFileA
Sections
.avx���� Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE