Static task
static1
Behavioral task
behavioral1
Sample
454a7dd6fee9ee42c14d8c1c11399460_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
454a7dd6fee9ee42c14d8c1c11399460_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
454a7dd6fee9ee42c14d8c1c11399460_JaffaCakes118
-
Size
12KB
-
MD5
454a7dd6fee9ee42c14d8c1c11399460
-
SHA1
45dd01c5a5c19b141bf66df99e73fea9fa466a21
-
SHA256
f8703c436b1d85f8a3fea6fe11300f4cd4d73abc835d89ed9e818fd71dea0131
-
SHA512
0abff43bf55906c03500726ee6c0f208b84154cae1f2bbca4364c24e9faafff6f12c79f124feef726baa31c6408b7efefc579b8c696200af7db852c065a1b593
-
SSDEEP
384:sXwrBFYD39+aN96jO+od/8KbUntfcVmx6td:8wcNNcjy8KCAmUt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454a7dd6fee9ee42c14d8c1c11399460_JaffaCakes118
Files
-
454a7dd6fee9ee42c14d8c1c11399460_JaffaCakes118.exe windows:4 windows x86 arch:x86
e72193d0410c73ea312c5a2b66ecf9bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetTickCount
GetWindowsDirectoryA
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
LoadLibraryA
LocalAlloc
LocalFree
ReadFile
GetModuleFileNameA
SetFilePointer
Sleep
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
ExitThread
ExitProcess
CloseHandle
DeleteFileA
CreateThread
CreateProcessA
CreateFileA
RtlZeroMemory
user32
FindWindowExA
FindWindowA
SendMessageA
wsprintfA
ws2_32
gethostname
getsockname
htonl
htons
inet_ntoa
listen
recv
gethostbyname
send
shutdown
socket
__WSAFDIsSet
WSAStartup
WSACleanup
connect
closesocket
bind
select
accept
advapi32
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ