Static task
static1
Behavioral task
behavioral1
Sample
0ce9a0097d3cac0b2d0791418425a48f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ce9a0097d3cac0b2d0791418425a48f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ce9a0097d3cac0b2d0791418425a48f_JaffaCakes118
-
Size
36KB
-
MD5
0ce9a0097d3cac0b2d0791418425a48f
-
SHA1
19985bb97f6a7e7671c0079740c0bdc9f140cfe4
-
SHA256
23a5d6d9c3919ece1dc9562398cacc4b05eefb897afb074d389aeb55df11df3a
-
SHA512
255e78271b43721dc4f7031d8daae2c9674a1e48e24583a7ae1a8e62ac64100483e5ac9c708c31abb922601bc5045ffe7d95ca26a086050ef44a13aa8c3292e0
-
SSDEEP
384:WgcaNOnYCDgQ9ZfF9qZdYdcyiIsZ9U9lHMsXhj:WgcuOn3hV7cesZ9iHMsx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ce9a0097d3cac0b2d0791418425a48f_JaffaCakes118
Files
-
0ce9a0097d3cac0b2d0791418425a48f_JaffaCakes118.exe windows:4 windows x86 arch:x86
33f98b45147a0a71e0c85e762f9603e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CloseHandle
Sleep
CreateFileA
CreateProcessA
GetLastError
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetFileAttributesA
advapi32
SetServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
shell32
SHGetFolderPathA
ws2_32
WSAStartup
socket
inet_addr
htons
inet_ntoa
send
recv
closesocket
WSACleanup
gethostbyname
connect
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE