Static task
static1
Behavioral task
behavioral1
Sample
058273d02443d3cc43d02419f918ba9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
058273d02443d3cc43d02419f918ba9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
058273d02443d3cc43d02419f918ba9c_JaffaCakes118
-
Size
144KB
-
MD5
058273d02443d3cc43d02419f918ba9c
-
SHA1
60d9e3110f05fec8ed4ddd33edf55f5c38599854
-
SHA256
0e560c13847bc4fd5b8897aeb706a4728705f56ae8077464a3bb1adeab765b2d
-
SHA512
11f3c336978404884a961e98c830f54ede0afc577e7c93c2b4834d3a4bf011338bafdc04b4eef77936af368026292861c0037b89008988ab743e3126014c7665
-
SSDEEP
3072:R5s5rWSOGzk2l4+Nass5yYb0cRJlO75cxf:HsV/acw5xbHRq75cZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058273d02443d3cc43d02419f918ba9c_JaffaCakes118
Files
-
058273d02443d3cc43d02419f918ba9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9205fa0557e02a88d21f46053473c57d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
URLDownloadToCacheFileA
shlwapi
StrStrIA
PathFindFileNameA
PathRemoveExtensionA
PathAddBackslashA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenW
InternetReadFile
kernel32
GetSystemInfo
VirtualProtect
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GlobalAddAtomA
lstrcatA
GetWindowsDirectoryA
lstrcpyA
DeleteFileA
GetPrivateProfileStringA
LockResource
LoadResource
SizeofResource
FindResourceW
GetLastError
FindResourceExW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrcpyW
GetModuleHandleW
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetStringTypeA
QueryPerformanceCounter
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
GetCurrentThreadId
SetLastError
TlsAlloc
GetFileType
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
VirtualQuery
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
user32
wsprintfA
CharNextW
advapi32
RegSetValueExW
RegOpenKeyA
RegEnumKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
shell32
ShellExecuteA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateGuid
CoCreateInstance
CoInitialize
oleaut32
VarUI4FromStr
SysAllocStringLen
SysFreeString
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE