Static task
static1
Behavioral task
behavioral1
Sample
301fb79c755254acb69a321160672b71_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
301fb79c755254acb69a321160672b71_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
301fb79c755254acb69a321160672b71_JaffaCakes118
-
Size
116KB
-
MD5
301fb79c755254acb69a321160672b71
-
SHA1
d12077a8f956ad562a65f6a414cc82c0caf1b874
-
SHA256
d9396fc4414207ba4b81f2d0d07f6605786b5e81465f34f1ac8a3e5fef664dac
-
SHA512
8c502edd4fb022a1bf1fcef05f3e5ec0c963bef97e5e9851894bc1081fdd5408c43e461543bc00fa37b4db22bbe71f3e00f4dd437142e6cce53e4469e99c74ed
-
SSDEEP
1536:9Qo5t39Me7oxiFSK0e/qttNON64rWTGvDX/u2uN5UtWwt:6o5x9lVqnNq6uX/6N5mWwt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 301fb79c755254acb69a321160672b71_JaffaCakes118
Files
-
301fb79c755254acb69a321160672b71_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d54f3e7cbe7e929de3aa56515c839d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostbyname
htonl
connect
select
__WSAFDIsSet
send
WSAStartup
ioctlsocket
setsockopt
ntohl
WSASocketA
bind
getsockname
listen
WSAAccept
ntohs
htons
WSAGetLastError
sendto
recvfrom
shutdown
closesocket
kernel32
SetHandleCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
HeapSize
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CreateFileA
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
FreeConsole
HeapAlloc
GetSystemTimeAsFileTime
GetLastError
HeapFree
ExitThread
CreateThread
GetTimeZoneInformation
GetCommandLineA
GetVersionExA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlushFileBuffers
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE