Static task
static1
Behavioral task
behavioral1
Sample
17aaa5742aa91b6d71ad4c547a948926_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17aaa5742aa91b6d71ad4c547a948926_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17aaa5742aa91b6d71ad4c547a948926_JaffaCakes118
-
Size
59KB
-
MD5
17aaa5742aa91b6d71ad4c547a948926
-
SHA1
b1b2779f5308e5d84ae68020e33c6762aa617aa6
-
SHA256
4b6a6ecb49d5f33a2a1462b9bd7deaadd1c37028975f02d1edb2284bdfc4f96a
-
SHA512
23775da85c77510a95e9813eac565806a9554f70ccaa20fae6cc1e4e296c472ea3a0eb666af60f30b89a19246b45e71447659eeeaeda373076d6b2e8e52e8b92
-
SSDEEP
768:ZNjGyHw28WpMr2RyXlaXMjKEzn6ywYwm52weTBBnt/TnKNZUhW8Uvt:OyHw28WpgVF6RqertnK/uCt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17aaa5742aa91b6d71ad4c547a948926_JaffaCakes118
Files
-
17aaa5742aa91b6d71ad4c547a948926_JaffaCakes118.exe windows:4 windows x86 arch:x86
2fbf197685187372e0e142a842657153
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateThread
SetFileAttributesA
GetModuleFileNameA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
WinExec
GetProcAddress
LoadLibraryA
GetTempPathA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
GetLocaleInfoW
SetEndOfFile
LCMapStringW
LCMapStringA
CreateFileA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetTickCount
ExitThread
TerminateProcess
VirtualQueryEx
ReadProcessMemory
GetThreadContext
SetThreadContext
WriteProcessMemory
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapReAlloc
ReadFile
SetFilePointer
shell32
ShellExecuteA
ws2_32
send
select
__WSAFDIsSet
WSAStartup
htons
socket
connect
closesocket
recv
gethostbyname
inet_addr
sendto
setsockopt
WSASocketA
htonl
Sections
.text Size: 53KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ