Static task
static1
Behavioral task
behavioral1
Sample
1760cfcacc6d2a1fe1dc137cd1efce1a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1760cfcacc6d2a1fe1dc137cd1efce1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1760cfcacc6d2a1fe1dc137cd1efce1a_JaffaCakes118
-
Size
1.4MB
-
MD5
1760cfcacc6d2a1fe1dc137cd1efce1a
-
SHA1
f13ecc4637282a5f3ffd9032dc19187b1f14cf43
-
SHA256
dacba2dcbd829ffd5a47c4856efb4e6fdbc3f9038fbe2ff86f5c70f945c0b706
-
SHA512
7b9a70e890a17b6c163de406d371c26858ba96c55863009958a44dfd8c157c590473dc9d625c1d085c1d2014cb0f1e64e9980284bc8442ef2523915f9fa495b7
-
SSDEEP
24576:deHgIattNzFPhnt9i0a0yBEDVa7sWZ2a2NQRd1T3tuK63g/kd3iLCtL:YXsPP9t9La070ZnTYhaO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1760cfcacc6d2a1fe1dc137cd1efce1a_JaffaCakes118
Files
-
1760cfcacc6d2a1fe1dc137cd1efce1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad2584877e04439062f30dd1a47ee56b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
EnumResourceTypesA
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
SetLastError
TlsAlloc
lstrcmpiA
lstrlenA
user32
CreateIcon
DestroyWindow
EndMenu
IsCharUpperA
MessageBoxIndirectA
LoadAcceleratorsW
MessageBoxA
ActivateKeyboardLayout
advapi32
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegCloseKey
ole32
OleUninitialize
ReleaseStgMedium
OleSetClipboard
OleInitialize
CreateOleAdviseHolder
CoUninitialize
CoInitialize
CoGetClassObject
CoCreateInstance
wininet
HttpAddRequestHeadersA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetGetCookieA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetSetOptionExA
InternetSetStatusCallbackA
InternetWriteFile
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ