Static task
static1
Behavioral task
behavioral1
Sample
da06c96b8011f3ee529c6a22686762cc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
da06c96b8011f3ee529c6a22686762cc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
da06c96b8011f3ee529c6a22686762cc_JaffaCakes118
-
Size
252KB
-
MD5
da06c96b8011f3ee529c6a22686762cc
-
SHA1
50b1adce619c1fb76a63c6994b52fb42f52076c9
-
SHA256
c938ffeeab6e5984622cae44ccaf91e9133c028a9b1866033cd66194d146b0f0
-
SHA512
65702353301be9e15b17ad39d5c8eae8986ae8aaab409b5608f04f8815c3c64df5eefff8f1238e93bb207bbbbb811620dffd7100c3e82b323c3f2aebf5bf995f
-
SSDEEP
6144:NP7o9d/CcwUy39NgYngySfx2QI8nx8qv4GQt4N7LYw:p7sCcCL6ySfm8nyGc4pYw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da06c96b8011f3ee529c6a22686762cc_JaffaCakes118
Files
-
da06c96b8011f3ee529c6a22686762cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
9149a8353533e2dfdd478d58d11c8bc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextA
gdi32
SaveDC
version
VerQueryValueA
wsock32
send
shell32
ShellExecuteA
ole32
IsEqualGUID
urlmon
URLDownloadToFileA
comctl32
ImageList_Add
wininet
FtpPutFileA
winmm
waveInOpen
rasapi32
RasEnumEntriesA
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
netapi32
Netbios
avicap32
capGetDriverDescriptionA
shfolder
SHGetFolderPathA
gdiplus
GdipFree
ws2_32
WSAIoctl
msacm32
acmStreamSize
pstorec
PStoreCreateInstance
url
InetIsOffline
Sections
.MPRESS1 Size: 244KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE