Static task
static1
Behavioral task
behavioral1
Sample
fdeb8748d3c001a90b25fcc1481b283b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdeb8748d3c001a90b25fcc1481b283b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdeb8748d3c001a90b25fcc1481b283b_JaffaCakes118
-
Size
165KB
-
MD5
fdeb8748d3c001a90b25fcc1481b283b
-
SHA1
30acf260708350c2691bd2cb4211931fb2dda005
-
SHA256
6f8adcdb2f513722ae3af2480bc732a339dce1dbfa18de04f90893f07e96782d
-
SHA512
ecbe6aebe943424bb1c15c4cee183257b19589175f3d9507b5991ceb7a7d33f729f44f0d045f5a3fbc87b05e3aac97d6ef2053fdfd6d8b9fbfb743e7e1933a39
-
SSDEEP
3072:BJofjDtO4EBdQcm68lkK/Gh22IZWK+H9k+pMX0P67Una/q0Nn:vgjEBdQcm68lzEZIZhe9kBEConY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdeb8748d3c001a90b25fcc1481b283b_JaffaCakes118
Files
-
fdeb8748d3c001a90b25fcc1481b283b_JaffaCakes118.exe windows:4 windows x86 arch:x86
69cbbd93ef9afbf27e5cf8c5c4a100ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
ReadFile
VirtualProtect
LoadLibraryExW
CreateProcessW
VirtualProtectEx
DeviceIoControl
VirtualProtectEx
LoadLibraryA
LoadLibraryExW
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
ReleaseMutex
LoadLibraryA
GetStartupInfoA
ReadProcessMemory
GetSystemTime
GetSystemTimeAsFileTime
CreateProcessW
DeviceIoControl
GetSystemTime
VirtualProtectEx
winhttp
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetOption
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
Sections
.text Size: 151KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ