Static task
static1
Behavioral task
behavioral1
Sample
1994febecd5a5c12fdc3476a2069a952_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1994febecd5a5c12fdc3476a2069a952_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1994febecd5a5c12fdc3476a2069a952_JaffaCakes118
-
Size
62KB
-
MD5
1994febecd5a5c12fdc3476a2069a952
-
SHA1
a92ee5e25cc5e748976540e4a86f45517962cca2
-
SHA256
20a73f3a9bdc6e9d50cf9892baa972973fbe0d9bbcea8060a8024e9d091bf0ab
-
SHA512
96d933d9aa8578cae9c3387341272bbe4c9bd2d075b868d6830226ee774c892e7318502f1d1bc1a79bd3534ccb6bfb890a028b9eeb32a6b29b7717e463ba0125
-
SSDEEP
768:GlnAyHLr2o60FpS4j7sbGbUNuUcSZZiQClxM5s:GlnAyHHFM4rb9SaQClGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1994febecd5a5c12fdc3476a2069a952_JaffaCakes118
Files
-
1994febecd5a5c12fdc3476a2069a952_JaffaCakes118.exe windows:4 windows x86 arch:x86
0194c3b23fcd17f2547aadbd710450ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
WinExec
GetTempPathA
SetFileAttributesA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
OpenMutexA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GetSystemDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
SetStdHandle
LCMapStringW
LCMapStringA
FlushFileBuffers
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
LocalAlloc
InterlockedExchange
RaiseException
GetTickCount
ExitThread
TerminateProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
shell32
ShellExecuteA
ws2_32
send
select
__WSAFDIsSet
recv
WSAStartup
WSAIoctl
htons
socket
connect
closesocket
setsockopt
gethostbyname
inet_addr
sendto
WSASocketA
htonl
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE