Static task
static1
Behavioral task
behavioral1
Sample
0cad42671e5771574df44a23b3634f32_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cad42671e5771574df44a23b3634f32_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0cad42671e5771574df44a23b3634f32_JaffaCakes118
-
Size
128KB
-
MD5
0cad42671e5771574df44a23b3634f32
-
SHA1
89f8f0bb69a5a3f31db60ffe5de34ff91000f975
-
SHA256
b263f7ed4806b95c7c06521704b8dddbc0b2d02885eec8181e1e65b4ad112918
-
SHA512
f9f8a64ab628368f200c4d8136c0a236fbc7b7836d3c27838bdc4f95a06813d0a2b2810618641e8f29373848b859279bf44c3b7daf7ae960aa648fd101cde2f2
-
SSDEEP
3072:E99B3B9oS6KmcZ/3z/tRkqq4M8M7HoiC3q9Xralury:K3BVN3RSsqBVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cad42671e5771574df44a23b3634f32_JaffaCakes118
Files
-
0cad42671e5771574df44a23b3634f32_JaffaCakes118.exe windows:4 windows x86 arch:x86
59add57608bc3b65703e3c499bca59e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetStartupInfoA
CreatePipe
ReadFile
TerminateProcess
GetProcAddress
GetModuleFileNameA
GetShortPathNameA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
CloseHandle
CreateThread
WriteFile
Sleep
CreateFileW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
RtlUnwind
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
RaiseException
HeapAlloc
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetEndOfFile
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
wininet
InternetSetCookieW
InternetOpenW
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
HttpEndRequestA
InternetWriteFile
HttpSendRequestExW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetCrackUrlW
InternetSetOptionW
InternetCloseHandle
ws2_32
WSAStartup
gethostname
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE