Static task
static1
Behavioral task
behavioral1
Sample
653adbefbdf0cae33f8e99456274333c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
653adbefbdf0cae33f8e99456274333c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
653adbefbdf0cae33f8e99456274333c_JaffaCakes118
-
Size
116KB
-
MD5
653adbefbdf0cae33f8e99456274333c
-
SHA1
123ec1df2397370aeba50c9c62afbe65faebf739
-
SHA256
1c315a7245c696ea62cc6d7a997a8a6f1097768d6d4f4fac90ed747b8c5b3588
-
SHA512
aa38e96a11b40a6ae0d3f8a9e92a956e3339a2bd57c19852954494c1efd3b6574289b67c2c2f6f1c9c36f6d26f2da665b39ebd59c099f288bc99cdd527f69a58
-
SSDEEP
1536:q/buoNwWgD8R+390iVtO7jo6hC/ggiCKZEkp2EYmv9UFFI22VnCTkd0EShNkpu4S:qTTaWgD8IN0iVc7nBgi7ZFv9cCb0TbUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 653adbefbdf0cae33f8e99456274333c_JaffaCakes118
Files
-
653adbefbdf0cae33f8e99456274333c_JaffaCakes118.exe windows:4 windows x86 arch:x86
6eabcb3a4d7f3195fe7965de70735a17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
btsendto
SENDTO_TransferProgressDialog
SENDTO_DeleteUselessLinks
SENDTO_SelectDeviceDialog
SENDTO_BipTransferProgressDialog
shlwapi
PathCombineA
PathMakeSystemFolderA
ws2_32
WSAStartup
ntohl
sendto
bind
socket
mfc42
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord815
ord540
ord561
ord1168
ord2818
ord860
ord2614
ord5601
ord5214
ord2621
ord2976
ord535
ord1146
ord823
ord1193
ord1151
ord939
ord6467
ord2841
ord2107
ord5450
ord5440
ord6383
ord6394
ord3081
ord2985
ord3262
ord1576
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord537
ord2764
ord4129
ord5710
ord6877
ord800
ord858
ord6569
ord1085
ord802
ord825
ord296
ord542
ord617
ord3663
ord4673
ord269
ord826
ord600
ord1578
ord1243
ord1176
ord1205
msvcrt
_controlfp
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_errno
_stricmp
wcslen
_purecall
malloc
free
toupper
isdigit
vsprintf
atoi
sprintf
_mbsicmp
sscanf
strtol
__CxxFrameHandler
_rmdir
_setmbcp
_mbscmp
kernel32
GetVersionExA
LoadLibraryA
FreeLibrary
CloseHandle
FindNextFileA
WriteFile
CreateFileA
SetFileAttributesA
LocalFree
LocalAlloc
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
DeleteCriticalSection
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
GetLastError
GetLongPathNameA
GetModuleFileNameA
CreateDirectoryA
DeleteFileA
GetSystemDirectoryA
MultiByteToWideChar
FindClose
FindFirstFileA
EnumResourceNamesA
SetLastError
OutputDebugStringA
WideCharToMultiByte
LeaveCriticalSection
user32
LoadStringA
LoadIconA
MessageBoxA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
CryptImportKey
CryptDecrypt
CryptGetUserKey
CryptGenKey
CryptExportKey
CryptEncrypt
CryptDestroyKey
InitializeSecurityDescriptor
CryptSetProvParam
CryptReleaseContext
CryptAcquireContextA
RegEnumKeyExA
RegDeleteValueA
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
CoCreateInstance
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE