Static task
static1
Behavioral task
behavioral1
Sample
d4c7f1f80883412f9796f1270accff50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4c7f1f80883412f9796f1270accff50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4c7f1f80883412f9796f1270accff50_JaffaCakes118
-
Size
14KB
-
MD5
d4c7f1f80883412f9796f1270accff50
-
SHA1
d20581741e64c8306fa94c7c8605e768a83168d4
-
SHA256
7d40062e8399a547f5578d462d3d864abf44a52a251f3d6dc0e3d0f2919b9b06
-
SHA512
18f6646a0549695289b3beef0cede804e28291bdb073a8e12dfb423a9ce0f1d4b4bbbdb3b37aa983020862b997e2d21bc0c5b9e47cb816d42aed0b5c17f456ac
-
SSDEEP
384:C6teCLZiVlTV7kiqA47KL++uo1V9zm1F3hWP:C6cCKFlkwMKL++xz9Uh4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4c7f1f80883412f9796f1270accff50_JaffaCakes118
Files
-
d4c7f1f80883412f9796f1270accff50_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa20da3770f42fb37b843a82ebf1c472
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fwrite
fflush
sscanf
_strnicmp
strncmp
strrchr
fopen
fseek
ftell
fread
fclose
sprintf
malloc
free
??2@YAPAXI@Z
strchr
strstr
??3@YAXPAX@Z
kernel32
GetModuleHandleA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
SetProcessPriorityBoost
GetCurrentDirectoryA
CopyFileA
DeleteFileA
GetModuleFileNameA
FreeLibrary
GetLastError
CreateFileA
GetFileSize
WriteFile
GetTempPathA
PeekNamedPipe
ReadFile
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
CreatePipe
GetStartupInfoA
CreateProcessA
CreateThread
CloseHandle
Sleep
TerminateProcess
GetExitCodeProcess
TerminateThread
GetExitCodeThread
WaitForMultipleObjects
user32
LoadStringA
shell32
SHChangeNotify
ShellExecuteExA
wininet
InternetConnectA
InternetWriteFile
HttpOpenRequestA
InternetOpenUrlA
HttpEndRequestA
HttpSendRequestA
InternetCloseHandle
HttpSendRequestExA
InternetOpenA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ