Static task
static1
Behavioral task
behavioral1
Sample
08505d5a7f14f73fc20d7338742f5af6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08505d5a7f14f73fc20d7338742f5af6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
08505d5a7f14f73fc20d7338742f5af6_JaffaCakes118
-
Size
48KB
-
MD5
08505d5a7f14f73fc20d7338742f5af6
-
SHA1
c2dacb75860072176f9cf9298c1cf510b5dd7f8c
-
SHA256
38f5d6ef0e141413ea3f27675209b8cb50f8f144b1a93dc25f567e93e32dad8e
-
SHA512
9560f4df06a1d68408c12ec64b0eb258aa6ab1a9f802159a960dec5799ba1b9bff4240e522166fd79403ade7d16b0405251984d672a7ddf489b7bf8dcc654246
-
SSDEEP
768:F2ar8+nK9x0r1Feh9WS6Rwg0o7saxCCzOndqT3:F2arxog18h9WJRw/+sS4dK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08505d5a7f14f73fc20d7338742f5af6_JaffaCakes118
Files
-
08505d5a7f14f73fc20d7338742f5af6_JaffaCakes118.exe windows:1 windows x86 arch:x86
490f766f79ac68909a539e8637e4dfdb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lclose
WriteFile
lstrcmpA
_lopen
lstrlenA
WritePrivateProfileStringA
GetWindowsDirectoryA
lstrcpyA
GlobalAddAtomA
lstrcatA
CopyFileA
CreateFileA
GetSystemDirectoryA
WriteProcessMemory
ExitProcess
VirtualAlloc
OpenProcess
FindFirstFileA
TerminateProcess
GlobalFindAtomA
GlobalAlloc
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetPriorityClass
GetProcAddress
GetStdHandle
CreateProcessA
GetTickCount
CreateRemoteThread
GetCurrentProcessId
SetFilePointer
Sleep
SetLastError
ResumeThread
SetFileAttributesA
FindClose
ReadFile
FindNextFileA
LoadLibraryA
GlobalFree
DeleteFileA
VirtualFree
GetFileSize
CloseHandle
VirtualProtectEx
WideCharToMultiByte
WriteConsoleA
advapi32
RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegQueryInfoKeyA
wsock32
gethostname
gethostbyname
WSAStartup
WSACleanup
inet_ntoa
user32
wsprintfA
TranslateMessage
SetWindowsHookExA
SetKeyboardState
SetClipboardViewer
SendMessageA
RegisterClassA
PeekMessageA
OpenClipboard
GetWindowTextA
GetMessageA
GetKeyboardState
GetKeyboardLayout
GetKeyNameTextA
GetForegroundWindow
GetFocus
GetWindowThreadProcessId
GetClipboardData
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CloseClipboard
CharLowerA
ToAsciiEx
CallNextHookEx
ole32
OleInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysStringLen
SysAllocStringByteLen
wininet
InternetGetConnectedState
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE