Static task
static1
Behavioral task
behavioral1
Sample
1b45bc383439825db6e829be282e3262_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b45bc383439825db6e829be282e3262_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1b45bc383439825db6e829be282e3262_JaffaCakes118
-
Size
46KB
-
MD5
1b45bc383439825db6e829be282e3262
-
SHA1
31a136282a8db4124ecfda9212f2c2f788372287
-
SHA256
d5276e135c02039741926eb641b95fcdf8d865c12973cb1d892ee2ef86be862c
-
SHA512
bb8ba62914d20f58962045fb4d273a2b439e80f00a685d068d3421667c9031769f97f63257b8e719d6cec711cb6e48759dd6315bc6b0d2fad2e407cc4d0133c2
-
SSDEEP
768:+fWACphEn0JmpuUMkSfWj+p9ntRC7RTMerIjQUdjaJvAmV:QnTIkws+p9vC7RTp0pdjOZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b45bc383439825db6e829be282e3262_JaffaCakes118
Files
-
1b45bc383439825db6e829be282e3262_JaffaCakes118.exe windows:4 windows x86 arch:x86
d6f91576a58677e3f0d6a99052732a3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetDateFormatA
GetDriveTypeA
GetFileSize
GetLocalTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetSystemDirectoryA
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetWindowsDirectoryA
GlobalAlloc
LocalAlloc
LocalFree
MapViewOfFile
ReleaseMutex
Sleep
SystemTimeToFileTime
UnmapViewOfFile
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
CreateMutexA
CreateThread
CloseHandle
ExitProcess
CreateFileMappingA
CreateFileA
CopyFileA
CompareFileTime
GlobalFree
user32
wsprintfA
wsock32
listen
recv
select
inet_addr
send
gethostname
gethostbyname
connect
closesocket
bind
accept
socket
WSAStartup
ole32
CoInitialize
CreateStreamOnHGlobal
shlwapi
StrTrimA
StrRChrA
StrStrIA
StrDupA
wininet
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
InternetCloseHandle
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegCloseKey
iphlpapi
GetNetworkParams
shell32
ShellExecuteA
Sections
beagle Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spm Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE