Static task
static1
Behavioral task
behavioral1
Sample
3ed3f90405ec5ee3eed0d99355b4444b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ed3f90405ec5ee3eed0d99355b4444b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ed3f90405ec5ee3eed0d99355b4444b_JaffaCakes118
-
Size
24KB
-
MD5
3ed3f90405ec5ee3eed0d99355b4444b
-
SHA1
d5266afb3199592e480b3e8de489845cc707dc51
-
SHA256
a2d7d7299b6a678ef5826ebe53607fe399466e3259f7d388afa02b18ad3fafd9
-
SHA512
42ca6e97c145dd49c0dd10da419e9fb710150ee8625d08639d28bcc0fe0ecb928ef528404ce4a64175e8066cfb25d000d245efc8f0585b4cd2bded2c2598ea5a
-
SSDEEP
384:U52gQUQSfX1TOO+Q3OWPHIKH9YlvgnlL6p41Fr:XgQUQSfYOBOWPo69YBgnlL6pi9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed3f90405ec5ee3eed0d99355b4444b_JaffaCakes118
Files
-
3ed3f90405ec5ee3eed0d99355b4444b_JaffaCakes118.exe windows:4 windows x86 arch:x86
3808f49daf2cf5758aaca85ba759f648
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACleanup
WSAStartup
ntohs
closesocket
select
recv
socket
htons
connect
send
inet_addr
gethostbyname
kernel32
GetTempFileNameA
GetTempPathA
GetFileInformationByHandle
WriteFile
TerminateProcess
GetExitCodeProcess
PeekNamedPipe
WaitForSingleObject
WaitForMultipleObjects
CreateThread
GetFileSize
CreatePipe
GetVersionExA
UnmapViewOfFile
MapViewOfFile
FreeLibrary
LocalFree
GetProcAddress
LoadLibraryA
DeleteFileA
GetComputerNameA
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GetStartupInfoA
Sleep
GetModuleFileNameA
GetLastError
GetModuleHandleA
CreateProcessA
advapi32
DeleteService
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
StartServiceCtrlDispatcherA
CreateServiceA
ChangeServiceConfig2A
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
msvcrt
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
_stricmp
_adjust_fdiv
memcpy
memset
strcpy
strcat
strlen
_beginthreadex
atoi
strcmp
strstr
sprintf
time
malloc
free
isdigit
strncpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE