Static task
static1
Behavioral task
behavioral1
Sample
4daf8f365b40f38b5ca90d98c6ecfd03_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4daf8f365b40f38b5ca90d98c6ecfd03_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4daf8f365b40f38b5ca90d98c6ecfd03_JaffaCakes118
-
Size
28KB
-
MD5
4daf8f365b40f38b5ca90d98c6ecfd03
-
SHA1
d4bb2fa9a41d81d58d4c244ab81919f0d42ba763
-
SHA256
06758c950781a83d3facb5eff97320378750b04bedd02acfc47a14965289afa1
-
SHA512
9f6b4cd3e230335f62f3d09b72acd6f1e59532629c3e614165606f083548af7670b8c59414e6cff33f2faf7779703aa50a6b6688929c501d791bd11df35ef898
-
SSDEEP
384:MuxKfQudX+pf2uO42uO6Tz6OG3yxakx2SuXVk5:MuGtdX+h95P7OuaM2bl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4daf8f365b40f38b5ca90d98c6ecfd03_JaffaCakes118
Files
-
4daf8f365b40f38b5ca90d98c6ecfd03_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bfc8aead86b5e7cc23a2ff5227780e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CopyFileA
GetWindowsDirectoryA
GetSystemTime
GetStartupInfoA
GetModuleHandleA
GetVersionExA
GetModuleFileNameA
GetComputerNameA
Sleep
GetLocalTime
GetDateFormatA
GetTimeFormatA
user32
wsprintfA
CharLowerA
advapi32
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
wsock32
connect
getservbyname
htons
gethostbyname
send
recv
WSAStartup
gethostname
inet_addr
WSACleanup
socket
WSAGetLastError
msvcrt
_strdup
??3@YAXPAX@Z
strlen
__CxxFrameHandler
_controlfp
_except_handler3
__set_app_type
__p__fmode
_itoa
fclose
__p__commode
strcat
strcpy
memset
??2@YAPAXI@Z
exit
__setusermatherr
_EH_prolog
memcpy
__getmainargs
_initterm
_adjust_fdiv
fread
ftell
fseek
fopen
free
_exit
_XcptFilter
_acmdln
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ximera Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE