Static task
static1
Behavioral task
behavioral1
Sample
26ec0d95d827d238f8313236bb12090d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26ec0d95d827d238f8313236bb12090d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26ec0d95d827d238f8313236bb12090d_JaffaCakes118
-
Size
21KB
-
MD5
26ec0d95d827d238f8313236bb12090d
-
SHA1
cb01ebacb6ccbe55c2013f9ebfffb4c78427945e
-
SHA256
87ea43c280fb5f6ba14e9a61ef8564903580d839ec4b361c36920b995739c8a7
-
SHA512
47d2da39250f3e278e969ab75e63190fad539f4219dc686e937cc3c4bad5f79822c2d551134922c5a9e2881e9458fb0e274ca5f3f842c6add774adedb2be4028
-
SSDEEP
384:bhVwPOAuRT9pctUcmnp+blBKA8AE4PbhJZ64zmp3H24x7W9Rw5ZCiCSSxbJ:LwWncZpbhJZ6RpXxxKRw5QPSq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ec0d95d827d238f8313236bb12090d_JaffaCakes118
Files
-
26ec0d95d827d238f8313236bb12090d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1342ce601547e3bf3a48e0a5b44a23b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_strdup
malloc
strtok
realloc
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
strchr
srand
rand
free
calloc
_vsnprintf
_beginthread
strstr
_snprintf
??1type_info@@UAE@XZ
_CxxThrowException
wcslen
fopen
fprintf
fclose
_endthread
__CxxFrameHandler
kernel32
WideCharToMultiByte
LocalFree
GetFileAttributesA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
MoveFileExA
GetTickCount
lstrlenA
SetErrorMode
DeleteFileA
CreateMutexA
GetLastError
ExitProcess
GetSystemDirectoryA
GetShortPathNameA
GetCurrentProcessId
GetLogicalDriveStringsA
GetDriveTypeA
CopyFileA
SetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
Sleep
GetCurrentProcess
user32
ShowWindow
BlockInput
SendMessageA
FindWindowExA
ws2_32
gethostbyname
inet_addr
recv
WSAGetLastError
socket
htons
connect
ioctlsocket
send
WSAStartup
closesocket
WSACleanup
shell32
ShellExecuteA
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
ntdll
ZwSystemDebugControl
NtQuerySystemInformation
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
VariantInit
VariantClear
dnsapi
DnsQuery_A
DnsRecordListFree
Sections
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
Size: 257B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE