Static task
static1
Behavioral task
behavioral1
Sample
61bfc3fd6eddaec229db20cec8deca1d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61bfc3fd6eddaec229db20cec8deca1d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61bfc3fd6eddaec229db20cec8deca1d_JaffaCakes118
-
Size
84KB
-
MD5
61bfc3fd6eddaec229db20cec8deca1d
-
SHA1
8b1fdd01eb4cd67f8b5912b06e94b484d6898104
-
SHA256
ea212650aa78e62bf415e12811ec822a41303ba4cd1dad4b137cd2d70dd6f832
-
SHA512
b9afeded6c065dec97955902d1c38232dc477fc974033cde4d536c3ee3723f743030529cdd41f08c3857fad3af5d3d795bfc615ba212c94d2c1d4e82e6f32774
-
SSDEEP
768:rUcz3CJfn2E7NeFkqEqwCjUvGzC7yiFYwQ3Fnnnnnnnnnnnngl+1VEiFy8flFRHa:Xu7uzACpDnnnnnnnnnnnnglGqV+FVyZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61bfc3fd6eddaec229db20cec8deca1d_JaffaCakes118
Files
-
61bfc3fd6eddaec229db20cec8deca1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
5933c22a3fea882ad789e7d659868079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetTempPathA
lstrcmpiA
lstrlenA
GetSystemDirectoryA
FindClose
FindFirstFileA
CloseHandle
GetFileSize
CreateFileA
CopyFileA
WriteFile
SetFileAttributesA
CreateDirectoryA
FindNextFileA
ReleaseMutex
WaitForSingleObject
DeleteFileA
lstrcmpA
WinExec
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
Sleep
ExitProcess
LoadLibraryA
ReadFile
GetShortPathNameA
lstrcpynA
GetSystemTime
VirtualFree
VirtualAlloc
FileTimeToSystemTime
GetTempFileNameA
SetFilePointer
SetEndOfFile
GetFileTime
SetFileTime
CreateThread
GetLastError
CreateMutexA
DeviceIoControl
HeapFree
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetLogicalDrives
GetWindowsDirectoryA
GetVersion
GetLogicalDriveStringsA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
GetComputerNameA
ResumeThread
GetStdHandle
TerminateProcess
RtlUnwind
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
user32
DefWindowProcA
SetTimer
ShowWindow
PostQuitMessage
EndDialog
KillTimer
CharLowerBuffA
wsprintfA
DialogBoxParamA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
ole32
CoUninitialize
CoInitialize
ws2_32
WSACleanup
inet_addr
gethostbyname
WSAStartup
Sections
.data Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ