Static task
static1
Behavioral task
behavioral1
Sample
484394b508e7a0ba80e8a5ee86d9d3a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
484394b508e7a0ba80e8a5ee86d9d3a7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
484394b508e7a0ba80e8a5ee86d9d3a7_JaffaCakes118
-
Size
41KB
-
MD5
484394b508e7a0ba80e8a5ee86d9d3a7
-
SHA1
c14e7d0099f6a3049a2cc83e2b17735eeb4c0256
-
SHA256
16a3189df2784a8b40088150e8e8396dde3c01671304c7c97680b0964678c19e
-
SHA512
e123ee51bf83f40fd658645586df81973f8e31c92a554edecc7a42806d10852e4a5e0bb4f8f05ef1abd9732187358453cca5ee8fe811f69fe80dd86e29152f4e
-
SSDEEP
768:aEKqYcX8kdLOkZ5y0mjAXAAyljampBb38:jKqYcX8kRdZ5y0HQAel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 484394b508e7a0ba80e8a5ee86d9d3a7_JaffaCakes118
Files
-
484394b508e7a0ba80e8a5ee86d9d3a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
592630d8dac3106ba99ffcbe6f6f3a3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
kernel32
Process32First
OpenProcess
MultiByteToWideChar
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalMemoryStatus
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVolumeInformationA
CloseHandle
GetVersionExA
Process32Next
ReadFile
lstrlenW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WideCharToMultiByte
UnmapViewOfFile
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetModuleHandleA
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetDriveTypeA
GetDiskFreeSpaceA
GetCurrentProcess
GetCurrentDirectoryA
GetComputerNameA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
ExitProcess
DeleteFileA
CreateToolhelp32Snapshot
CreateFileMappingA
CreateFileA
Sleep
user32
GetMessageA
GetDC
DispatchMessageA
CreateWindowExA
wsprintfA
ReleaseDC
SetWindowLongA
TranslateMessage
SetTimer
oleaut32
SysFreeString
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocString
advapi32
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
GetUserNameA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
shlwapi
StrRChrA
StrCmpNA
StrChrA
StrStrIA
wsock32
gethostname
connect
closesocket
WSAStartup
recv
send
socket
ws2_32
WSAIoctl
rasapi32
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasEnumEntriesA
gdi32
GetDeviceCaps
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE