Static task
static1
Behavioral task
behavioral1
Sample
09f58ea67c7df8582e861a9da08b0c14_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09f58ea67c7df8582e861a9da08b0c14_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09f58ea67c7df8582e861a9da08b0c14_JaffaCakes118
-
Size
149KB
-
MD5
09f58ea67c7df8582e861a9da08b0c14
-
SHA1
289685940ab0b00ae6a845a7355c1e9a3b12c830
-
SHA256
4039bb4a82317b5c9f2625c8dd18a9e533de86c033af957823ac1dd08ee1c08e
-
SHA512
8c91c1a41d3ba3f3147933bf6f444a9282eeafb7c4ca27e241a024b8cc49a6aa774dd902d187cf58508e7fa5a83e1faf9ecd1e6ccb47d628444c0466eefe8e86
-
SSDEEP
3072:1+R0hajiERTWntMGQhGzRRlKOogPbtL5wbNhYJWfln5lwVc:1J2yR0QbtLONhtluc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09f58ea67c7df8582e861a9da08b0c14_JaffaCakes118
Files
-
09f58ea67c7df8582e861a9da08b0c14_JaffaCakes118.exe windows:4 windows x86 arch:x86
636be159eb791ea27a61868acea071d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
send
htons
setsockopt
recv
socket
select
WSAGetLastError
shutdown
ioctlsocket
closesocket
WSACleanup
gethostbyname
connect
WSAStartup
gethostname
inet_addr
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
kernel32
ReleaseMutex
GetPrivateProfileIntA
CreateThread
LeaveCriticalSection
EnterCriticalSection
TerminateThread
GetModuleFileNameA
GetTempPathA
GetModuleHandleA
GetCurrentDirectoryA
lstrlenA
GetLastError
WaitForMultipleObjects
DeleteFileA
InitializeCriticalSection
DeleteCriticalSection
WriteFile
CopyFileA
GetUserDefaultLangID
GlobalFree
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
SetConsoleCtrlHandler
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalMemoryStatus
GetVersion
GetVersionExA
CreateMutexA
CloseHandle
CreateEventA
WinExec
GetTickCount
GetPrivateProfileStringA
WaitForSingleObject
SetEvent
MulDiv
CreateFileA
LoadLibraryA
ReadFile
SetFilePointer
GetFileSize
IsBadWritePtr
HeapCreate
HeapDestroy
VirtualFree
GetProcAddress
HeapSize
GetEnvironmentVariableA
TerminateProcess
VirtualAlloc
UnhandledExceptionFilter
GetCurrentProcess
GetOEMCP
GetACP
GetCPInfo
RemoveDirectoryA
CreateDirectoryA
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
GetStringTypeW
GetSystemTime
GetTimeZoneInformation
GetLocalTime
FreeEnvironmentStringsA
FreeEnvironmentStringsW
RtlUnwind
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetStdHandle
GetFileType
SetHandleCount
IsBadReadPtr
IsBadCodePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
MultiByteToWideChar
GetStringTypeA
HeapReAlloc
user32
LoadIconA
DialogBoxParamA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
MessageBoxA
GetClassInfoExA
SetForegroundWindow
EndPaint
FindWindowA
SetFocus
ReleaseDC
FillRect
GetClientRect
ScreenToClient
GetDC
CreateWindowExA
ShowWindow
GetWindowRect
SetWindowTextA
IntersectRect
IsRectEmpty
PtInRect
UnionRect
SendDlgItemMessageA
DrawTextA
InvalidateRect
UpdateWindow
SetDlgItemTextA
KillTimer
SetTimer
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetSystemMetrics
GetMessageA
MessageBoxIndirectA
EndDialog
DestroyWindow
PostQuitMessage
GetDlgItem
EnableWindow
RegisterClassExA
DefWindowProcA
LoadAcceleratorsA
PostMessageA
SendMessageA
IsWindow
gdi32
CreateSolidBrush
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
GetObjectA
CreateFontIndirectA
SetMapMode
SetTextColor
SetBkColor
GetBkColor
DeleteDC
SetBkMode
CreateBitmap
CreateDIBitmap
DeleteObject
BitBlt
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteExA
ole32
CoCreateGuid
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ