Static task
static1
Behavioral task
behavioral1
Sample
435905f37452b4a0e8bea3adba04d358_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
435905f37452b4a0e8bea3adba04d358_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
435905f37452b4a0e8bea3adba04d358_JaffaCakes118
-
Size
48KB
-
MD5
435905f37452b4a0e8bea3adba04d358
-
SHA1
f5287e4a21235954f56c84633711d35baa5a789e
-
SHA256
f21fd21c90fed4db3bba2a15ea7247db217e9cca2de8b924006091c9fce0f45b
-
SHA512
68eb9fdfce263db7178b6784a39121ccbbc91660a4a1b971bf802e02348bd8d7ec50af386a137bd0a4f83640729f17195d4735cc41bab410d3ff42ce83396805
-
SSDEEP
384:JpZiLg8EDpoUuhGrmli8l5owyeyyZlq+jzlXhvo1o9:JvMPEtQGoldyk4+xhvom9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435905f37452b4a0e8bea3adba04d358_JaffaCakes118
Files
-
435905f37452b4a0e8bea3adba04d358_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c3e6896f18c452707959118b435c891
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentDirectoryA
GetTickCount
SetEvent
DebugBreak
CreateEventA
Sleep
WaitForSingleObject
OpenEventA
CreateProcessA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetFileAttributesA
advapi32
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
ControlService
wsock32
WSAStartup
select
sendto
socket
gethostbyname
closesocket
urlmon
URLDownloadToFileA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ