Static task
static1
Behavioral task
behavioral1
Sample
05cb95c3526f4d71766d3d7594b83fda_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
05cb95c3526f4d71766d3d7594b83fda_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05cb95c3526f4d71766d3d7594b83fda_JaffaCakes118
-
Size
164KB
-
MD5
05cb95c3526f4d71766d3d7594b83fda
-
SHA1
3954a4bb13f5b7fa0cc2e4561ac213facefb4621
-
SHA256
9dfe875c0c313a546a915d0af349474e1b72f6fa281a6b873857cd91ca3e82da
-
SHA512
c75361ea10e80c1ab9955782844439f896d127da9d5f6f847000889d5e363d8aeb32000e0ee4504d578cec206194a092923fae53bbe0a51a3b4539a8df452d6c
-
SSDEEP
3072:B4PY4jTfARxl5mNxm+EY11JHBsDlW69fm7BZOqByPkkV:B4PY4jTInm/m+r1nBs5Wr7aiVkV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 05cb95c3526f4d71766d3d7594b83fda_JaffaCakes118
Files
-
05cb95c3526f4d71766d3d7594b83fda_JaffaCakes118.exe windows:4 windows x86 arch:x86
684ec088ae8de83486d953a0db8e676a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSARecvDisconnect
socket
kernel32
WriteFile
GetSystemInfo
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetTickCount
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
HeapFree
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
CloseHandle
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
user32
wsprintfA
wvsprintfA
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ