Static task
static1
Behavioral task
behavioral1
Sample
e8c7e7724b3637b137d54cfe5ba1a216_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8c7e7724b3637b137d54cfe5ba1a216_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8c7e7724b3637b137d54cfe5ba1a216_JaffaCakes118
-
Size
30KB
-
MD5
e8c7e7724b3637b137d54cfe5ba1a216
-
SHA1
b161b34130f07b1fefb8b8b30c3ad1cdbf665c7d
-
SHA256
57dd876a28f7bcd0e2bdceb46721e52dd0f5d1a385f55ef126880b872bf28d6b
-
SHA512
b4630b81298fd2d440e08b471f4fed23c6820a3770472f8145b38d2f37e84e1f6b8ac2afc772a45bd1a17d536f5bdb70e694c92b37ba506eeda8483560c64075
-
SSDEEP
192:9Sa8tcaAWyRxmxLjOB2Gth7gwGaHyM2EYHes/6Xh0YZQoRv5ZT3aXSJKi:9MOWy/mxLSnh71GPEUeCYh3Zrn93aXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8c7e7724b3637b137d54cfe5ba1a216_JaffaCakes118
Files
-
e8c7e7724b3637b137d54cfe5ba1a216_JaffaCakes118.exe windows:4 windows x86 arch:x86
b4f84bd6a1dcf45a2a9a6bfe8b4261c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
GetTickCount
CreateThread
HeapFree
ExitProcess
HeapAlloc
WriteFile
GetSystemDirectoryA
CreateProcessA
GetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
VirtualProtect
WriteProcessMemory
ResumeThread
GetModuleHandleA
CloseHandle
CreateFileA
Sleep
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
FreeLibrary
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
GetModuleFileNameA
ReadFile
lstrcpyA
GetComputerNameA
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
shell32
ShellExecuteA
ws2_32
closesocket
recv
send
ntohl
setsockopt
htons
socket
bind
htonl
WSAStartup
connect
inet_ntoa
user32
wsprintfA
advapi32
ControlService
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
shlwapi
SHSetValueA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE