Static task
static1
Behavioral task
behavioral1
Sample
e23de51e100b6db2fda5c7cf2a98a9ef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e23de51e100b6db2fda5c7cf2a98a9ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e23de51e100b6db2fda5c7cf2a98a9ef_JaffaCakes118
-
Size
108KB
-
MD5
e23de51e100b6db2fda5c7cf2a98a9ef
-
SHA1
d0b31d7d3bf1fa56ef105dc1ea25fca46e720525
-
SHA256
2fde9523b81cafe01c71d53aaef148e6a7395e1972f743cc47f3929af6036802
-
SHA512
4b3b8d62f36a419629ce37654dc4f91427c2eec6e511b17d4f1b782c58160289d4bdbd4efad232ad670dfe07c3c283b8bd08b72e72721f178811214474fcd3a3
-
SSDEEP
1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlw+tZEnP:zozVZvJm01mB57EnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e23de51e100b6db2fda5c7cf2a98a9ef_JaffaCakes118
Files
-
e23de51e100b6db2fda5c7cf2a98a9ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3fe98783c971443e9a7e6cadf916a81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpQueryInfoW
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetOpenUrlA
InternetCanonicalizeUrlW
InternetReadFile
ole32
CoInitialize
CoCreateInstance
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ws2_32
gethostbyname
WSAStartup
WSACleanup
shlwapi
PathGetCharTypeW
kernel32
LoadLibraryA
ReadFile
GetFileSize
CreateFileMappingA
MapViewOfFile
RtlMoveMemory
RtlZeroMemory
VirtualProtect
lstrcmpA
lstrcpynA
lstrlenA
LockResource
LoadResource
CreateProcessA
lstrcatA
Sleep
GetVersionExA
ExitProcess
CloseHandle
GetModuleFileNameA
GetDiskFreeSpaceExA
CreateDirectoryA
CreateFileA
SystemTimeToFileTime
GetSystemTime
CreateMutexA
MoveFileA
DeleteFileA
OutputDebugStringA
CopyFileA
GetWindowsDirectoryA
lstrcpyA
MulDiv
FlushFileBuffers
WriteFile
SetFilePointer
GetLastError
ExitThread
TerminateThread
CreateThread
SizeofResource
FreeLibrary
RtlUnwind
CompareStringA
InterlockedExchange
GetModuleHandleA
GetSystemDirectoryA
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA
GetCommandLineA
UnmapViewOfFile
GetTickCount
user32
CharLowerA
SendMessageA
GetDlgItem
CreateDialogParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetDlgItemTextA
GetDlgItemTextA
SetFocus
GetDC
InvalidateRect
SetWindowPos
ShowWindow
SetForegroundWindow
IsWindowVisible
EnableMenuItem
GetSystemMenu
gdi32
CreateFontIndirectA
GetDeviceCaps
advapi32
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
OpenSCManagerW
RegFlushKey
RegOpenKeyExA
CloseServiceHandle
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ