Static task
static1
Behavioral task
behavioral1
Sample
35466c9573b8d3d5e3b5dff12254fdeb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35466c9573b8d3d5e3b5dff12254fdeb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35466c9573b8d3d5e3b5dff12254fdeb_JaffaCakes118
-
Size
37KB
-
MD5
35466c9573b8d3d5e3b5dff12254fdeb
-
SHA1
8a79a82a4f15b5481d77c54881d6a9ce9360ac45
-
SHA256
29058dddb0eb9a157722e99d819f54bc81e90194c7bdbc5205b0556a916b89d1
-
SHA512
47f1ba5df71c06112750cfb4bbd22878f5bb4c95660f217e534dd14dcd0b0666e26dcc838b6fa3947505bb13b9276db3eedff4f93b802d0873a3a2732e140a4a
-
SSDEEP
768:8DEgVodPiqUqOX+YoTd55PbP3PkA7q9pWfRBU0MPteKl:wVodKqOOYOZP8AOXSR2teQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35466c9573b8d3d5e3b5dff12254fdeb_JaffaCakes118
Files
-
35466c9573b8d3d5e3b5dff12254fdeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
69337ba49e7228f48f73ac1af763e050
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
send
closesocket
inet_addr
ioctlsocket
recv
gethostbyname
select
WSAStartup
WSACleanup
htons
socket
connect
user32
CharLowerA
advapi32
RegCreateKeyExA
DeleteService
ControlService
CreateServiceA
LockServiceDatabase
QueryServiceLockStatusA
ChangeServiceConfig2A
UnlockServiceDatabase
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
RegCloseKey
RegSetValueExA
StartServiceCtrlDispatcherA
AdjustTokenPrivileges
shell32
SHGetFolderPathA
ntdll
NtQuerySystemInformation
ZwSystemDebugControl
kernel32
GetFileType
RtlUnwind
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
CloseHandle
CreateProcessA
ExitThread
ExitProcess
GetTempPathA
lstrcmpiA
Sleep
ReleaseMutex
GetTickCount
CreateMutexA
SetFileAttributesA
GetLastError
CreateDirectoryA
GetModuleHandleA
OpenMutexA
SetErrorMode
GetCurrentProcessId
GetCurrentProcess
GetProcAddress
LoadLibraryA
FreeLibrary
SetEvent
DeleteFileA
LocalFree
LocalAlloc
WaitForSingleObject
CreateThread
GetVersionExA
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
WriteFile
ReadFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE