Static task
static1
Behavioral task
behavioral1
Sample
4543fcbc2bdc613e75dafe033bc98ce5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4543fcbc2bdc613e75dafe033bc98ce5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4543fcbc2bdc613e75dafe033bc98ce5_JaffaCakes118
-
Size
36KB
-
MD5
4543fcbc2bdc613e75dafe033bc98ce5
-
SHA1
37452e62924bdcd9c31fe9a81d1e913d2efad4a5
-
SHA256
fe62d3bec73b60799fc07a84ac4810c4adb624b02350f4df41f080177ba684a6
-
SHA512
9bbd5c2f69c8bb6c29c738455e3551f0913806d9431f2052fef916c1f7fffa9626a85fbd84a5cc7a27a24179615a21740a8824100bb4b26864b498277db23169
-
SSDEEP
384:IAeYqbP2+1yS8OL7TDdSyVAevmlYl0lWaRkEPGxXg0S9f+dtZZb7SKgLlQ:IDpbO+1iOL3Dd1xjBEexXfc+dtfvEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4543fcbc2bdc613e75dafe033bc98ce5_JaffaCakes118
Files
-
4543fcbc2bdc613e75dafe033bc98ce5_JaffaCakes118.exe windows:4 windows x86 arch:x86
67f881f5ee42eb12cf149422a4773ec0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dnsapi
DnsReplaceRecordSetA
DnsRecordListFree
DnsModifyRecordsInSet_A
DnsAcquireContextHandle_A
DnsQuery_A
ws2_32
inet_ntoa
inet_addr
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetCommandLineA
GetVersion
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
CloseHandle
MultiByteToWideChar
LCMapStringA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE