Static task
static1
Behavioral task
behavioral1
Sample
0c5dbed3670e65e4237f8df141a350ba_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c5dbed3670e65e4237f8df141a350ba_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c5dbed3670e65e4237f8df141a350ba_JaffaCakes118
-
Size
172KB
-
MD5
0c5dbed3670e65e4237f8df141a350ba
-
SHA1
fed72d46417deda496f3895e7cffc1756446b614
-
SHA256
3ef4253aaeacfd17ab7c30e6a1779a0b1b9fe32c9709cb89c9468a3fce0dc641
-
SHA512
70879345d39638caf9470b81810357d2658669529e14cc7a395141f8413884045c05c43c0b37ae7c510e023d0e411fefce0b9c85b708d24acbe37d1c8267f85a
-
SSDEEP
3072:22YSD+Nd5Hf7oSR43BfCxHyQmWC9p3kKROYwuO32Isxlwz/t:YSD+nZEfCJFC9p3kKRz6mIiwz/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5dbed3670e65e4237f8df141a350ba_JaffaCakes118
Files
-
0c5dbed3670e65e4237f8df141a350ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4e27bb66bdc2dd437dd388e1a9f83bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
inet_ntoa
gethostbyname
htons
socket
bind
connect
shutdown
closesocket
WSACleanup
kernel32
InitializeCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetStringTypeW
GetProcAddress
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
GetTickCount
DeleteFileA
CloseHandle
LockResource
LoadResource
SizeofResource
FindResourceA
WriteFile
CreateFileA
ExpandEnvironmentStringsA
GetSystemDirectoryA
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ