Static task
static1
Behavioral task
behavioral1
Sample
cc4e628450923a62749652c718447df4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc4e628450923a62749652c718447df4_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
cc4e628450923a62749652c718447df4_JaffaCakes118
-
Size
121KB
-
MD5
cc4e628450923a62749652c718447df4
-
SHA1
ab58808ba98d3d2329959fa8f3f0c47d3fa1c731
-
SHA256
959b7437e887885cf06cd30a2366200b130506490e9a83549c257fe1a2d4c701
-
SHA512
9f7d0c7513f5e27a7393c45acae2048fef0e262a4aa7a3b4b6ed1fd92570298168d4f3b94392ed9a789346130fa54369af4c3c622d1a25523662d4a1c994ddfa
-
SSDEEP
1536:0W+caYNZXeWK3O9UmGGLbQd9AVaOoNTfqrvrKQr36/uInfNIOajxG/n5oscys2D3:0WeeSOFhmmVadQTEYxk5Fsd21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc4e628450923a62749652c718447df4_JaffaCakes118
Files
-
cc4e628450923a62749652c718447df4_JaffaCakes118.exe windows:6 windows x64 arch:x64
0da19a3ce7222cb0aeb5e48884a5cccc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
bcrypt
BCryptHashData
BCryptDestroyHash
BCryptFinishHash
BCryptCreateHash
BCryptEncrypt
BCryptDuplicateHash
BCryptDestroyKey
BCryptGenRandom
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptSecretAgreement
BCryptImportKeyPair
BCryptDestroySecret
BCryptDeriveKey
BCryptExportKey
BCryptImportKey
crypt32
CryptDecodeObject
CryptBinaryToStringA
CryptStringToBinaryA
ws2_32
closesocket
gethostbyname
WSAStartup
send
socket
WSACleanup
recv
htons
setsockopt
WSAGetLastError
inet_addr
connect
inet_ntoa
secur32
InitSecurityInterfaceA
kernel32
CreateThread
TerminateThread
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
FlushFileBuffers
GetFileSize
CreateFileA
GetFileAttributesA
SetFilePointer
GetModuleFileNameA
Sleep
GetConsoleWindow
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetStdHandle
GetCurrentThreadId
GetLocalTime
GetTickCount
GetCommandLineW
LocalFree
GetEnvironmentVariableA
LoadLibraryA
ReadFile
WriteFile
user32
ShowWindow
advapi32
RegSetValueExA
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
shell32
CommandLineToArgvW
msvcrt
__CxxFrameHandler3
atexit
vprintf
free
malloc
vsprintf_s
_vscprintf
sscanf
_mkgmtime
time
wcstombs
memmove
memchr
memcmp
memcpy
memset
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ