Static task
static1
Behavioral task
behavioral1
Sample
0822decd8e5a3b8aac62dc5bd378e749_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0822decd8e5a3b8aac62dc5bd378e749_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0822decd8e5a3b8aac62dc5bd378e749_JaffaCakes118
-
Size
48KB
-
MD5
0822decd8e5a3b8aac62dc5bd378e749
-
SHA1
2dcd706aabe3d6f9ed0e1883aa1c9211511e2e66
-
SHA256
0944b13621096aa06d912905c6156c15ea10f30acc5281e2f37ed1005082fd53
-
SHA512
b374aad05718deacc6c37ee11ec4e9b319cc29dd58c163cd282481a2c4fd41a62aa830ce8f68d62f6b4f506fd69311c8968c94f90aea3bb5f2506a8a5b89038a
-
SSDEEP
384:DpZiLg8EDpoUuhGrmli8l5owyeyyZlq+jzlXhvo1o:DvMPEtQGoldyk4+xhvom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0822decd8e5a3b8aac62dc5bd378e749_JaffaCakes118
Files
-
0822decd8e5a3b8aac62dc5bd378e749_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c3e6896f18c452707959118b435c891
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentDirectoryA
GetTickCount
SetEvent
DebugBreak
CreateEventA
Sleep
WaitForSingleObject
OpenEventA
CreateProcessA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetFileAttributesA
advapi32
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
ControlService
wsock32
WSAStartup
select
sendto
socket
gethostbyname
closesocket
urlmon
URLDownloadToFileA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE