Static task
static1
Behavioral task
behavioral1
Sample
0782d3416735ca91c24837b80c4acf6c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0782d3416735ca91c24837b80c4acf6c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0782d3416735ca91c24837b80c4acf6c_JaffaCakes118
-
Size
92KB
-
MD5
0782d3416735ca91c24837b80c4acf6c
-
SHA1
0e142f00c967c79fff70773efbd8a0d4c14fbc5e
-
SHA256
ee8726da2f221c71c74057d38eef89df6a39d1aab7b239e9964cf0cc2d3c0dd6
-
SHA512
ca7792d3f6df6cab25d094b35b96105e2cf98ee1724e59dd08c6cfd6d0c3e8e0dfee42cd8f100c0148a8275ec0bf592a42ea47d276335a9c21632d9cddf0ac52
-
SSDEEP
1536:qZjTrakcFnJhDlxTk1oUzMQbRVfNqJA91u1Vnbkr/nPlf+W7D:qZj/+DfmoeR5JY7BmD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0782d3416735ca91c24837b80c4acf6c_JaffaCakes118
Files
-
0782d3416735ca91c24837b80c4acf6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
610510643d264bf3596349014bc83d2e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetModuleFileNameA
Sleep
GetLastError
GetTempFileNameA
GetTempPathA
GetFileAttributesA
CreateDirectoryA
SetFileAttributesA
CreateProcessA
CloseHandle
GetVersionExA
lstrcmpiA
SystemTimeToFileTime
FileTimeToSystemTime
GetFileAttributesExA
CreateThread
ResumeThread
ExitThread
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetLocalTime
GetTimeZoneInformation
ExitProcess
GlobalAlloc
GlobalFree
GetCurrentDirectoryA
SetFilePointer
WriteFile
ReadFile
CreateFileA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetCurrentProcess
DuplicateHandle
GetStdHandle
InitializeCriticalSection
DeleteCriticalSection
GetDiskFreeSpaceA
FileTimeToLocalFileTime
GetFileType
IsBadReadPtr
RtlUnwind
FindNextFileA
GetEnvironmentStrings
FreeEnvironmentStringsA
shfolder
SHGetFolderPathA
user32
DispatchMessageA
GetMessageA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
RegisterClassExA
CreateWindowExA
PostMessageA
DefWindowProcA
SendMessageA
PostQuitMessage
wsprintfA
MessageBoxA
wininet
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetReadFile
ws2_32
WSAStartup
gethostbyname
WSACleanup
ole32
CoCreateGuid
StringFromGUID2
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 4KB - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ