Static task
static1
Behavioral task
behavioral1
Sample
0674aafb3e939464a345fd00f526a579_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0674aafb3e939464a345fd00f526a579_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0674aafb3e939464a345fd00f526a579_JaffaCakes118
-
Size
18KB
-
MD5
0674aafb3e939464a345fd00f526a579
-
SHA1
26309fa24d7b3bd51ae5386c03cbafa8d9762338
-
SHA256
b6a5131f92a4e39573b1a3693422cc677593d5f6313bf5c29f787da1384576b3
-
SHA512
e8a5c6d8eb410ad6e224e047eedd52167f223a68adba5fb52df73fa6c18c81e401846be349784c77ec9e244e5f537b7e6cefa947105464f53a2597bd6f157bf1
-
SSDEEP
384:AQgeZSjvSqUFcKSkoFUFd4VcVacHUzRr44Tt6Wy:6USjvSLSR2ecgeUzRtEWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0674aafb3e939464a345fd00f526a579_JaffaCakes118
Files
-
0674aafb3e939464a345fd00f526a579_JaffaCakes118.exe windows:4 windows x86 arch:x86
aba5f83a4b4fe8b54aa40a827cce3965
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetDateFormatA
GetDriveTypeA
GetFileSize
GetLocalTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetProcAddress
GetSystemDirectoryA
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
CreateToolhelp32Snapshot
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
Process32First
Process32Next
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesA
SetFilePointer
Sleep
SystemTimeToFileTime
TerminateProcess
UnmapViewOfFile
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CreateThread
CreateMutexA
CreateFileMappingA
CreateFileA
CopyFileA
CompareFileTime
LoadLibraryA
CloseHandle
user32
CharUpperA
wsprintfA
wsock32
gethostbyname
gethostname
inet_addr
listen
closesocket
bind
accept
WSAStartup
recv
select
send
socket
connect
ole32
CreateStreamOnHGlobal
CoInitialize
shlwapi
StrStrIA
StrRChrA
StrDupA
StrTrimA
StrChrIA
wininet
InternetGetConnectedState
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntryA
FindCloseUrlCache
advapi32
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
Sections
avc0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avc1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avc2 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE