Static task
static1
Behavioral task
behavioral1
Sample
0240ed7e45567f606793dafaff024acf_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0240ed7e45567f606793dafaff024acf_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0240ed7e45567f606793dafaff024acf_JaffaCakes118
-
Size
1.3MB
-
MD5
0240ed7e45567f606793dafaff024acf
-
SHA1
2646a18fdd6a7a2063b3443283ec1159696c1339
-
SHA256
14461260f9b3988d4eb4e46bc7d9861172266a9a01bf15c57916a9e4f9dc0618
-
SHA512
1c0c7daa33b5a0ad90cf9a88729e5680c92196d4d2e252b0f4f49b7b966008fdc823707c3b0b6462a62d28e328b59c51fa84c0cc31e0faa08d1a65592062f605
-
SSDEEP
12288:Kfmj3br9Mpi2zujFK9NNk55iOW2C2zujFK9NNk55iOW2AQ:KCL2pi2XNOC2XNOAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0240ed7e45567f606793dafaff024acf_JaffaCakes118
Files
-
0240ed7e45567f606793dafaff024acf_JaffaCakes118.exe windows:5 windows x86 arch:x86
196403780741c51b0fdaabe0fe8d727e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohs
inet_ntoa
gethostbyname
gethostname
WSACleanup
WSAStartup
iphlpapi
GetTcpTable
psapi
GetModuleFileNameExW
EnumProcessModules
kernel32
GetWindowsDirectoryW
CreateFileW
GetFileTime
GetModuleFileNameW
LocalAlloc
Sleep
TerminateProcess
MoveFileExW
SetFileTime
GetProcAddress
GetModuleHandleW
GetSystemInfo
GetVersionExW
WriteFile
SetFilePointer
GetTempPathW
GetTempFileNameW
HeapFree
ReadFile
InitializeCriticalSection
GetFileSizeEx
EnterCriticalSection
LeaveCriticalSection
CreateThread
DeleteCriticalSection
CopyFileW
GetTickCount
Module32FirstW
Module32NextW
FindResourceW
LoadResource
LockResource
SizeofResource
IsValidLocale
EnumSystemLocalesA
GetProcessHeap
HeapAlloc
GetFileAttributesW
DeleteFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
VirtualFree
OpenProcess
VirtualAlloc
GetLastError
SetEnvironmentVariableA
CloseHandle
CreateProcessW
SetStdHandle
WriteConsoleW
MoveFileW
GetCurrentProcess
GetTimeZoneInformation
LoadLibraryW
SetEndOfFile
CompareStringW
GetFileSize
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
WideCharToMultiByte
GetCommandLineW
HeapSetInformation
RaiseException
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetLocaleInfoW
HeapSize
FlushFileBuffers
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
user32
wsprintfW
advapi32
CloseServiceHandle
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
QueryServiceStatusEx
EnumDependentServicesW
ControlService
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegConnectRegistryW
StartServiceW
QueryServiceStatus
CreateServiceW
ChangeServiceConfig2W
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges
LookupPrivilegeValueW
LookupAccountSidW
GetTokenInformation
CreateProcessAsUserW
OpenProcessToken
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ