Static task
static1
Behavioral task
behavioral1
Sample
08c287d80ac1f32cc2f6ea454eabd0fa_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08c287d80ac1f32cc2f6ea454eabd0fa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08c287d80ac1f32cc2f6ea454eabd0fa_JaffaCakes118
-
Size
188KB
-
MD5
08c287d80ac1f32cc2f6ea454eabd0fa
-
SHA1
91e049c77a798ef2a553e89124d9a5bd7411c7dd
-
SHA256
cc48510d9dc14e574f4752cce9838f4437ee376cdafabf713846cb37451543b9
-
SHA512
b3f7065c6da5c9091b54464331b9e424f0233a458757b1e977f13dd2bb1d35ff54ce1ab00438b4fe40891c590ddb93332aaad7d62d1c94bf90d4e3fda7fbf265
-
SSDEEP
3072:ilaiGLXXJUuKBjzbZ5AIf9cUgMRKo96V6KHADiCSg1hcQXkTQQ0m009RTjwHsI1g:3XKuwmIlcUuB6KHApSg1hcQEQQw0IHlK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c287d80ac1f32cc2f6ea454eabd0fa_JaffaCakes118
Files
-
08c287d80ac1f32cc2f6ea454eabd0fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
d6370162471cee32fff8c8a608864249
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
strlen
strcpy
strcat
strncpy
_stricmp
strcmp
tolower
memcpy
printf
exit
fprintf
sprintf
bsearch
vsprintf
malloc
fopen
fgets
fclose
vfwprintf
vfprintf
_vsnwprintf
memchr
_wcsicmp
wcsncmp
strncmp
_wcsnicmp
_strnicmp
wcsncpy
strchr
getenv
qsort
sscanf
feof
time
ctime
toupper
fwrite
fflush
_open_osfhandle
_fdopen
setvbuf
_fileno
_isatty
system
_getcwd
_CIsqrt
_CIlog
strncat
_CIpow
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_finite
_isnan
_CIlog10
_CIfmod
floor
ceil
_CIsin
_CIsinh
_CItan
_CItanh
swscanf
atof
_wcsdup
free
_strdup
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
SetCurrentDirectoryA
Sleep
GetCurrentThreadId
TlsGetValue
TlsSetValue
TlsAlloc
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
GetCurrentProcessId
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
PeekNamedPipe
WriteFile
ReadFile
GetExitCodeProcess
HeapReAlloc
GetLastError
SetLastError
CreateFileW
CreateFileA
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
GetTickCount
SuspendThread
ResumeThread
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
OpenMutexA
SetEnvironmentVariableA
TerminateThread
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
AllocConsole
SetConsoleTitleA
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
IsBadReadPtr
OpenProcess
FreeConsole
GetConsoleMode
SetConsoleMode
GetFileAttributesA
GetLocalTime
comctl32
InitCommonControls
user32
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
PostThreadMessageA
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
ole32
CoInitialize
shell32
ShellExecuteExA
wsock32
closesocket
WSACleanup
WSAStartup
WSAGetLastError
recv
send
inet_addr
gethostbyname
socket
htons
bind
listen
accept
setsockopt
connect
Sections
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ