Static task
static1
Behavioral task
behavioral1
Sample
3333724528d14d9e0455b2aa5ac190ea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3333724528d14d9e0455b2aa5ac190ea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3333724528d14d9e0455b2aa5ac190ea_JaffaCakes118
-
Size
64KB
-
MD5
3333724528d14d9e0455b2aa5ac190ea
-
SHA1
79a1478505ac37ae39986ac8e664e0176146b73c
-
SHA256
b7c4e8fdba14f98f0b7ecb26bd32caf8297a46c805f31c2baf001178dc5704bf
-
SHA512
31b8f1a4a61958730614e00590ea80df321c80e75100c71c2d7bf6b52fc86b2807b5bf6e0d5d073caa445de2132e34964511e844e6ec6cf0896bb659a02eab12
-
SSDEEP
768:JpXar+Jmo8VNI4C0VDnzxQw7CgtdDFozPpEEKvoRRHZmsx:JZar+JmoF4C0jCOFoTf4onQsx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3333724528d14d9e0455b2aa5ac190ea_JaffaCakes118
Files
-
3333724528d14d9e0455b2aa5ac190ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
57c7e28d7b1b3810d1293d5d1dcb45c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
Process32First
CreateToolhelp32Snapshot
SetFilePointer
SetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
Process32Next
CreateThread
GetLocalTime
LoadLibraryA
GetProcAddress
GetVersion
GetTickCount
Sleep
CreateProcessA
WriteFile
GetTempPathA
GetTempFileNameA
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
CopyFileA
GetCurrentProcessId
OpenProcess
LocalAlloc
LocalFree
GetLastError
CreateFileA
CloseHandle
GetFileSize
ReadFile
GetDriveTypeA
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FlushFileBuffers
advapi32
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
StartServiceA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegisterServiceCtrlHandlerA
OpenServiceA
SetServiceStatus
StartServiceCtrlDispatcherA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ws2_32
gethostbyname
closesocket
recv
htons
connect
WSAGetLastError
WSAStartup
socket
gethostname
send
mpr
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE