Static task
static1
Behavioral task
behavioral1
Sample
5db6d688012e6036385996fe34270b83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5db6d688012e6036385996fe34270b83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5db6d688012e6036385996fe34270b83_JaffaCakes118
-
Size
88KB
-
MD5
5db6d688012e6036385996fe34270b83
-
SHA1
301c38f7022ad0d03a9e1ab79989227deacd9a9a
-
SHA256
319f6f3802b580ae4f0eefb372894314a2cfb1202510a64963e5509af93cae92
-
SHA512
b7934442a31767392f153e081542bf6dd9e0cb2486e3280ce9839fef2426d61cf702baac0f2f976b6b92c10d7ff14e154e7b0fc9a6d2366382f59f166605350d
-
SSDEEP
1536:XraNU7civ1PK3uODziw/qodMKIlXVGdBiPyQeh8oI:XfdPY7DjrahhVGziPyn8oI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5db6d688012e6036385996fe34270b83_JaffaCakes118
Files
-
5db6d688012e6036385996fe34270b83_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8e7f25a656b7d41a893868ace61f763
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetModuleFileNameA
Sleep
TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
DeleteFileA
GetComputerNameA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
SetFileAttributesA
CreateFileA
SetStdHandle
SetConsoleCtrlHandler
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapAlloc
ReadFile
GetFileType
GetStringTypeA
FindFirstFileA
SetHandleCount
FlushFileBuffers
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
SetFilePointer
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
SetEndOfFile
WriteFile
GetStdHandle
DebugBreak
GetLastError
MoveFileA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
user32
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
TranslateMessage
LoadCursorA
LoadIconA
SetTimer
UpdateWindow
ShowWindow
RegisterClassExA
GetClipboardData
GetAsyncKeyState
GetKeyState
wsprintfA
OpenClipboard
CreateWindowExA
CloseClipboard
DestroyWindow
PostQuitMessage
DefWindowProcA
DispatchMessageA
advapi32
GetUserNameA
shell32
ShellExecuteA
wininet
InternetGetConnectedState
wsock32
send
recv
connect
htons
closesocket
gethostbyname
ioctlsocket
WSACleanup
WSAStartup
socket
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ