Static task
static1
Behavioral task
behavioral1
Sample
3418811a997be62ff059fab585ddbeec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3418811a997be62ff059fab585ddbeec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3418811a997be62ff059fab585ddbeec_JaffaCakes118
-
Size
88KB
-
MD5
3418811a997be62ff059fab585ddbeec
-
SHA1
17dd1be8046dec8d109de5273de1c85450792bf5
-
SHA256
f7a71104aee6d0d20a5010d3f9dc2a23d22cbcedb3569ac7d0ef33f414c6ff32
-
SHA512
4131506f36e3d954e1d840fd22fbeaba4b28461670de52e15a3269ad1b1615dc8780010847531e6f9ed9195cb04cd06a6649b5efec54d9a3f6ce91c06251a488
-
SSDEEP
1536:wc1xNi2wkrf9b1ddLCvkYplWyONKNh71fIOp8hQQBLImihRu:31xNgcf9b1ddLqWjKNV1f54smT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3418811a997be62ff059fab585ddbeec_JaffaCakes118
Files
-
3418811a997be62ff059fab585ddbeec_JaffaCakes118.exe windows:4 windows x86 arch:x86
d6c853fe7393b0b2fb744e1f93f3cd80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
lstrlenA
Sleep
lstrcmpA
FindClose
FindNextFileA
UnmapViewOfFile
FindFirstFileA
lstrcatA
lstrcpyA
FreeLibrary
VirtualAlloc
GetProcAddress
LoadLibraryA
GetVersionExA
GetFileSize
CloseHandle
SetPriorityClass
GetCurrentProcess
CreateProcessA
WriteFile
LockResource
LoadResource
FindResourceA
CopyFileA
GetSystemDirectoryA
GetSystemTime
GetCurrentProcessId
HeapAlloc
GetVersion
GetEnvironmentVariableA
ExpandEnvironmentStringsA
CreateFileA
GetProcessHeap
CreateFileMappingA
MapViewOfFileEx
CreateThread
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
ExitProcess
user32
wsprintfA
advapi32
RegFlushKey
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
ws2_32
connect
htons
inet_addr
gethostbyname
socket
inet_ntoa
send
closesocket
recv
bind
htonl
WSAGetLastError
__WSAFDIsSet
ioctlsocket
select
gethostname
WSAStartup
accept
listen
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ