Static task
static1
Behavioral task
behavioral1
Sample
f9683fc584e9aa38e8015e7f3d38f943_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9683fc584e9aa38e8015e7f3d38f943_JaffaCakes118
-
Size
414KB
-
MD5
f9683fc584e9aa38e8015e7f3d38f943
-
SHA1
7ae16aad648dd8ceee86829a6e4e9572b53af5e3
-
SHA256
e7e39872122f9544e4f9cf1fd479f4bb45db7795aec8c4a1ae1c746017f1e9d9
-
SHA512
92a1895b1f0cf74759a22fe5df4b9f52280a38e2a2b120e5e33dae7dde7f74b69f9b514c447b492b59d6d6f7426d77488b8d3e22fe5d5d568ed366eac45e30f8
-
SSDEEP
12288:n7e+mKm0DWnJ8I3MR3PWjf0lNLZXcpdnTr+5R:EKnDWR3MR3OT0zZk9Tr+X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9683fc584e9aa38e8015e7f3d38f943_JaffaCakes118
Files
-
f9683fc584e9aa38e8015e7f3d38f943_JaffaCakes118.exe windows:4 windows x86 arch:x86
3fd32c5cc88b57d56c9058eb6cff9edc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
mpr
WNetGetUserA
version
VerQueryValueA
gdi32
SaveDC
comctl32
ImageList_Add
shell32
ShellExecuteA
wininet
InternetOpenA
winmm
waveInOpen
wsock32
send
netapi32
Netbios
msvfw32
DrawDibDraw
avicap32
capCreateCaptureWindowA
urlmon
URLDownloadToFileA
ws2_32
WSACleanup
Sections
.text Size: 406KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xh520 Size: 47B - Virtual size: 47B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE