Static task
static1
Behavioral task
behavioral1
Sample
009c7a815e8c684780b3408fc831f4df_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
009c7a815e8c684780b3408fc831f4df_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
009c7a815e8c684780b3408fc831f4df_JaffaCakes118
-
Size
5KB
-
MD5
009c7a815e8c684780b3408fc831f4df
-
SHA1
7321f8808467770108c1f9033023b107d79fd6b3
-
SHA256
035a5ab1198cf7fafe7d57a70a0b1db85af09da51891090ac9a9a3a7139bfa20
-
SHA512
273eb35261b6168f5bbbd69d5da7b4d0aa515d84e6fbd122661ecc77caef6cbb1e509e635821d77899432f3a3cae4549512378f788007733eb89beeccd27d4a3
-
SSDEEP
96:Oq+xiVTqYawwDwwu+MZkQ0AMejL2dYckGvKlrsAf/2su7ZX:6i1BDwcweZkQlMenoYckgKlrnf/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 009c7a815e8c684780b3408fc831f4df_JaffaCakes118
Files
-
009c7a815e8c684780b3408fc831f4df_JaffaCakes118.exe windows:4 windows x86 arch:x86
56e492ce405563418b2fb9a9451cb9b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
LoadLibraryA
CloseHandle
lstrcmpiA
lstrlenA
lstrcatA
GetLongPathNameA
GetTempFileNameA
GetTempPathA
DeleteFileA
CreateFileA
lstrcpyA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
VirtualFreeEx
GetModuleHandleA
OpenProcess
ExitProcess
WinExec
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
WaitForSingleObject
CreateThread
GetComputerNameA
GetLastError
CreateMutexA
TerminateProcess
CreateProcessA
GetStartupInfoA
SetErrorMode
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
GetUserNameA
shell32
FindExecutableA
ShellExecuteA
msvcrt
sprintf
strrchr
ws2_32
send
recv
WSACleanup
closesocket
shutdown
connect
gethostbyname
inet_addr
htons
socket
WSAStartup
urlmon
URLDownloadToFileA
Sections
FAMDiy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE