Static task
static1
Behavioral task
behavioral1
Sample
08c2ac99a55967b6918984b8145ea0bd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08c2ac99a55967b6918984b8145ea0bd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08c2ac99a55967b6918984b8145ea0bd_JaffaCakes118
-
Size
108KB
-
MD5
08c2ac99a55967b6918984b8145ea0bd
-
SHA1
28b384cf3d8632f735e83cfff92b65199c8c09aa
-
SHA256
cc048ca4e8a5ae28a1a79ecfed946dd437c24bcdd51a29e0281ccdfc2a44987e
-
SHA512
39404187d1ffa35d5682ff129d63654a12e82db4b4109b57c24ffd20b9221e920dfdb66b996aee00eeeb851d9d24c21cbc16abde3a10cf24495dafcb21793ec4
-
SSDEEP
1536:PnBRqmkzNoF4w3qN1OqRLLlgk3eon2WZ9HY0TLiBjm6b0YGY9+LTNlvoZ:PymkzNo0rRionhTAjz2YwLTNlvoZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c2ac99a55967b6918984b8145ea0bd_JaffaCakes118
Files
-
08c2ac99a55967b6918984b8145ea0bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8051143ef1e252da92e703a67fa0243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetModuleHandleA
GetTickCount
GetLastError
WinExec
InitializeCriticalSection
CreateThread
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
Sleep
EnterCriticalSection
MoveFileExA
LeaveCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
RaiseException
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetProcAddress
GetFileAttributesA
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetFilePointer
ReadFile
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
DeleteFileA
advapi32
CreateServiceA
OpenSCManagerA
OpenServiceA
ChangeServiceConfig2A
CloseServiceHandle
SetServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
ws2_32
closesocket
send
recv
inet_addr
htons
ioctlsocket
connect
select
gethostbyname
htonl
inet_ntoa
WSAStartup
socket
urlmon
URLDownloadToFileA
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE