time
Static task
static1
Behavioral task
behavioral1
Sample
3bad38f4d6c61bc6dc4e10979b6ae4ef_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bad38f4d6c61bc6dc4e10979b6ae4ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bad38f4d6c61bc6dc4e10979b6ae4ef_JaffaCakes118
-
Size
60KB
-
MD5
3bad38f4d6c61bc6dc4e10979b6ae4ef
-
SHA1
f81da7506d7c69d198f88115ee74e9302551f2e4
-
SHA256
c2c5df60272f434b53ff123894da9cf52d1c0a03d7125994247e927e0d9423dc
-
SHA512
9796a3959f5e5386a5c16db619074a224b7795aade97446166cedff42d8802c5e831fe7cd00b90550334a520b9aa7ba2c1a0cee7ca7f58d870e08812b24f76d6
-
SSDEEP
768:kC2zAQSnOmKllfxicaoqUFLwCk67iM26Dvv4ihVb2cP+F4ltfTVOWIB7XptJaajl:ezAQSn6b8ot22rV/TrxOWItX5aaicd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bad38f4d6c61bc6dc4e10979b6ae4ef_JaffaCakes118
Files
-
3bad38f4d6c61bc6dc4e10979b6ae4ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5019ba6697b291ff56ff5fb6fb15103
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
closesocket
WSAStartup
bind
listen
accept
inet_addr
gethostbyname
socket
setsockopt
htons
recv
connect
WSAGetLastError
shutdown
select
__WSAFDIsSet
send
inet_ntoa
kernel32
DeleteCriticalSection
GetCommandLineA
GlobalAlloc
CreateMutexA
CopyFileA
InitializeCriticalSection
CreateThread
ExitThread
Sleep
WaitForSingleObject
GetCurrentThread
GetCurrentProcessId
GetLastError
GetCurrentThreadId
TerminateThread
GetCurrentProcess
GetVersion
GetProcessHeap
GetTickCount
advapi32
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
msvcrt
strlen
strcat
rand
realloc
atoi
strchr
strstr
strcpy
_snprintf
free
gmtime
malloc
_time64
_spawnl
sscanf
strncpy
srand
strtok
strrchr
sprintf
exit
_fullpath
_execl
fwrite
fclose
fread
_filelength
fopen
strncmp
isdigit
_strrev
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE