Static task
static1
Behavioral task
behavioral1
Sample
008b407874ad86fdf02e9e0439dbce8b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
008b407874ad86fdf02e9e0439dbce8b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
008b407874ad86fdf02e9e0439dbce8b_JaffaCakes118
-
Size
29KB
-
MD5
008b407874ad86fdf02e9e0439dbce8b
-
SHA1
90fc22b15c100d6eed6dd1e3b9fe20ae13f41471
-
SHA256
b0971a9fb026795817fbec067b3a4c6f67ba655553203272901df1442050a572
-
SHA512
17d0af13596f03602798e53c51e3c6fa8ed59d48e472bc6e96107715ee510e6f752a80279ba557531d8e5bf33df7e275d792553d73d011251d6a00dd650b0d00
-
SSDEEP
384:4Emn3GNl2/NOibjc6nui0FwnD1n+4GXGDxCrcxk/UiHudEtyT9FTDsF:h8/N86Y6Dhm2DxCr5/UeVynTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008b407874ad86fdf02e9e0439dbce8b_JaffaCakes118
Files
-
008b407874ad86fdf02e9e0439dbce8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bc34723fbfe958f8633bc9ea8037212
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
ExitProcess
GetTickCount
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
SetFileAttributesA
CopyFileA
GetCurrentProcess
GetLastError
CreateMutexA
GetProcAddress
LoadLibraryA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
DeleteFileA
GetShortPathNameA
GetModuleFileNameA
GetCurrentProcessId
lstrlenA
GetVersionExA
FreeResource
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
DeviceIoControl
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
GetModuleHandleA
ReadFile
GetFileSize
WinExec
GlobalMemoryStatus
CreateThread
GetSystemDirectoryA
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesA
FindClose
lstrcatA
FindFirstFileA
FindNextFileA
lstrcpyA
GetDriveTypeA
Sleep
GetEnvironmentVariableA
GetStartupInfoA
advapi32
RegOpenKeyExA
ControlService
CreateServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
SHGetFileInfoA
msvcrt
printf
sprintf
fclose
fread
fseek
_stat
fopen
fwrite
strstr
exit
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ws2_32
WSACleanup
WSAStartup
sendto
socket
htons
gethostbyname
inet_addr
send
connect
inet_ntoa
setsockopt
WSASocketA
recv
WSAGetLastError
htonl
closesocket
Sections
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE