Static task
static1
Behavioral task
behavioral1
Sample
db6a997fb725065ae45e31398a1c3cb0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db6a997fb725065ae45e31398a1c3cb0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db6a997fb725065ae45e31398a1c3cb0_JaffaCakes118
-
Size
88KB
-
MD5
db6a997fb725065ae45e31398a1c3cb0
-
SHA1
64710bfaf2ed9de5600243f2ba846b377e4393cf
-
SHA256
9bd6d7ca8bd7325c05d056b616055a6ee2a7f4dc7acf6669c526baab9d5ca50d
-
SHA512
416b40f9c8ec50a8cd884fb112f998eef5f65b901eb9608b213fdf3a2e3d67803cc9c17cb52d4da7e0e9ee80275842329c4ef7e991986a73b0080384cc6d2c3e
-
SSDEEP
1536:4c3VtN/jLWhlRqCn1HKkUF6aN1YzdMTLnTBpS//4U4:1v7LWhlEC8F6aNsaZI//4U4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db6a997fb725065ae45e31398a1c3cb0_JaffaCakes118
Files
-
db6a997fb725065ae45e31398a1c3cb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
68276189a668399edef16d07689d1029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjectsEx
GetTempPathA
WriteFile
CreateFileA
GetModuleHandleA
SetEvent
OpenEventA
GetVolumeInformationA
GetModuleFileNameA
GetSystemDirectoryA
CreateEventA
ReleaseMutex
WaitForSingleObject
CloseHandle
SetLastError
GetLastError
CreateMutexA
DeleteFileA
GetStartupInfoA
DeviceIoControl
LoadLibraryA
GetProcAddress
CreateDirectoryA
FindFirstFileA
FindClose
GetVersionExA
MoveFileExA
GetWindowsDirectoryA
GetShortPathNameA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
OpenMutexA
SystemTimeToFileTime
GetSystemTimeAsFileTime
advapi32
RegDeleteValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
wininet
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
msvcrt
free
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcmp
strcat
strlen
strcpy
toupper
_itoa
_purecall
_ui64toa
_atoi64
sprintf
strchr
tolower
??2@YAPAXI@Z
_ultoa
strstr
_splitpath
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
memset
shell32
ShellExecuteA
ws2_32
inet_addr
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE