Static task
static1
Behavioral task
behavioral1
Sample
08b00e16f184ffd20081e6bd8fd49875_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08b00e16f184ffd20081e6bd8fd49875_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08b00e16f184ffd20081e6bd8fd49875_JaffaCakes118
-
Size
42KB
-
MD5
08b00e16f184ffd20081e6bd8fd49875
-
SHA1
6e3f36f49e4106129e7bbbeeb597dc579840dcec
-
SHA256
00c8a441e03c423566973bcc9f167663ee53c925a42e247a37553e70dddfe79a
-
SHA512
20bfbb330e7458ac9be9b91bcce278154302c05a98c71de6f84bf2ff146a9eaeb69871634cd10a680aa3ab2a026816099d6f9b12fcb3e2957560c9eb80e2d81e
-
SSDEEP
768:9CEbSVFa0wh8ff8p8PqGv0hwqvdxnacva8/0l16/SV/:92a0Sc8p8P7v0CgJacD0z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08b00e16f184ffd20081e6bd8fd49875_JaffaCakes118
Files
-
08b00e16f184ffd20081e6bd8fd49875_JaffaCakes118.exe windows:4 windows x86 arch:x86
c882e1e107b9f0ae83872a4f31e49e70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetTickCount
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
GetSystemTimeAsFileTime
CreateThread
HeapFree
HeapAlloc
ExitProcess
WriteFile
CloseHandle
GetSystemDirectoryA
CreateProcessA
GetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
VirtualProtect
WriteProcessMemory
ResumeThread
GetModuleHandleA
CreateFileA
Sleep
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
GetWindowsDirectoryA
FreeLibrary
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
ReadFile
lstrcpyA
GetComputerNameA
wininet
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
shell32
ShellExecuteA
ws2_32
htons
htonl
setsockopt
closesocket
WSAStartup
recv
send
connect
bind
socket
inet_ntoa
ntohl
gethostbyname
user32
wsprintfA
advapi32
ControlService
ChangeServiceConfigA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
shlwapi
SHSetValueA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE