Static task
static1
Behavioral task
behavioral1
Sample
07467e3ab671ee92607105ad7bd57cb6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07467e3ab671ee92607105ad7bd57cb6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
07467e3ab671ee92607105ad7bd57cb6_JaffaCakes118
-
Size
25KB
-
MD5
07467e3ab671ee92607105ad7bd57cb6
-
SHA1
e4acf59253839197b45b8066981c438c9d16a49e
-
SHA256
cfd888d98aaec357bdf75ac6527b917aeb24a82ff49d4a80593f73448ccb11d9
-
SHA512
09250ae8014bdc07a7b54727fa96c43b0060d196b234e35b0b6011b67592ee3be10f022edcdb60991c217b8735648a335af8feb7630855c6c6303992a4460330
-
SSDEEP
384:hUNASaUf9tao7vRIQqLrO77O2CIVXD9Bn001x8pMYuL9x1Fvo5TSV3eDLS7n6UP5:+ASx9tNFzqS15hBv1S3uZFvoK3B1P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07467e3ab671ee92607105ad7bd57cb6_JaffaCakes118
Files
-
07467e3ab671ee92607105ad7bd57cb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
99c0f316d3309fef7323013075cd9d9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
recv
select
socket
htons
send
closesocket
ioctlsocket
gethostbyname
inet_addr
sendto
connect
WSAStartup
WSACleanup
urlmon
URLDownloadToFileA
kernel32
FindFirstFileA
LocalFree
GetStartupInfoA
GetLogicalDriveStringsA
GetDriveTypeA
CreateDirectoryA
CreateFileA
WriteFile
CloseHandle
ReadProcessMemory
OpenProcess
Module32Next
DeleteFileA
Sleep
TerminateProcess
SetFileAttributesA
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
GetModuleFileNameA
GetModuleHandleA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
VirtualAlloc
CreateProcessA
ExpandEnvironmentStringsA
FreeLibrary
lstrcpyA
GetProcAddress
lstrlenA
lstrcatA
FindClose
LoadLibraryA
GetLastError
CopyFileA
GetFileAttributesA
lstrcmpiA
GetWindowsDirectoryA
CreateThread
ExitProcess
GetLocaleInfoA
GetTempPathA
GetTickCount
ExitThread
GlobalUnlock
GlobalLock
GlobalAlloc
CreateMutexA
SetErrorMode
GetVersionExA
shell32
ShellExecuteA
advapi32
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
user32
SetClipboardData
keybd_event
FindWindowA
wsprintfA
EmptyClipboard
OpenClipboard
VkKeyScanA
ShowWindow
SetFocus
SetForegroundWindow
BlockInput
IsWindow
SendMessageA
CloseClipboard
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__getmainargs
_acmdln
_except_handler3
_controlfp
_CxxThrowException
??1type_info@@UAE@XZ
??3@YAXPAX@Z
exit
_XcptFilter
_exit
malloc
_ftol
strncat
srand
strtok
atoi
strchr
strncmp
memmove
strncpy
strlen
_snprintf
memset
strcpy
strcmp
sprintf
strstr
strcat
memcpy
rand
fclose
fprintf
fopen
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
VariantInit
SysAllocString
VariantClear
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ