Static task
static1
Behavioral task
behavioral1
Sample
18f17623a76f83b1d623ccfca39c13f7_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18f17623a76f83b1d623ccfca39c13f7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18f17623a76f83b1d623ccfca39c13f7_JaffaCakes118
-
Size
64KB
-
MD5
18f17623a76f83b1d623ccfca39c13f7
-
SHA1
9a52fcbefac9b3ffba189871d3745266ad9fa4ba
-
SHA256
9da3cc5787320f726d6dd58babc06e4d538fca365ea292b3555219eea281dd2f
-
SHA512
266eddb04ec373f5d2ec16ab0cca60eb3961887b81ff4b3f4544f91256c18388fa3f3ee913ece2744021ac002bbf5586906a57d3e07ae8a733c63850aa261e1b
-
SSDEEP
1536:w4eexfi4gWMhdkmG34azamtHHEJpb6OsSbZ:w4eexfpQdkmG3JOgnupb6OsSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18f17623a76f83b1d623ccfca39c13f7_JaffaCakes118
Files
-
18f17623a76f83b1d623ccfca39c13f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7a299974f7c5552c5ecb11935c13614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
WinExec
GetModuleFileNameA
lstrlenA
GetLastError
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
CloseHandle
GlobalMemoryStatus
GetComputerNameA
GetCurrentProcess
GetTempPathA
DeleteFileA
ExitProcess
lstrcpyA
CreateProcessA
TerminateProcess
CreateThread
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
ExitThread
GetShortPathNameA
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringW
SetEnvironmentVariableA
LCMapStringA
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
user32
wsprintfA
ExitWindowsEx
advapi32
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
OpenSCManagerA
OpenServiceA
DeleteService
CreateServiceA
shell32
ShellExecuteA
ws2_32
gethostbyname
inet_ntoa
send
connect
closesocket
recv
WSASocketA
setsockopt
htons
inet_addr
sendto
WSACleanup
WSAStartup
WSAGetLastError
socket
htonl
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE