Static task
static1
Behavioral task
behavioral1
Sample
02827136c06b558b5eab87a4eb4c3b5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02827136c06b558b5eab87a4eb4c3b5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02827136c06b558b5eab87a4eb4c3b5d_JaffaCakes118
-
Size
44KB
-
MD5
02827136c06b558b5eab87a4eb4c3b5d
-
SHA1
e1e24ee323b158ecc240b434354bb75cb409c0cc
-
SHA256
ade4ad42231ba70374b23ab3fd339c6870f4c64b2a95acf673427862c9a7a42e
-
SHA512
3044a38f14701ef2298420fdbf66029319904b59a82d115fb2f1c96fbf50f2e72a5aa04ca0df22ff473c6f495021127620bd65fbf4434e2316ec49c39adce300
-
SSDEEP
768:Ybc9jFOZoNdT6xeau1427QZ63DqRyCDFM/97i8/ob:YbKsZoLC2g6TmyCDFsfob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02827136c06b558b5eab87a4eb4c3b5d_JaffaCakes118
Files
-
02827136c06b558b5eab87a4eb4c3b5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2193a93e5811b1207485529101ae6b20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetVersion
CopyFileA
GetModuleFileNameA
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetLastError
CloseHandle
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE