Static task
static1
Behavioral task
behavioral1
Sample
631ed20b27d862af4653fe87b1e63f17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
631ed20b27d862af4653fe87b1e63f17_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
631ed20b27d862af4653fe87b1e63f17_JaffaCakes118
-
Size
16KB
-
MD5
631ed20b27d862af4653fe87b1e63f17
-
SHA1
08e4fd4ae77c68e2b1f9d30e8e9956a151c9c061
-
SHA256
bf0615328d6218e9b59b17f0df41fb8a0bf7abee9a394cf739acb295379828d7
-
SHA512
f4054bcbb7fd37fb3ee9aa5566152af0ce547e7dcb78c6af6b838a9c7b15ce8511a0a0b09bd85f96fd66010cb541725e898cf26e8d285571a1cf57e77e89b1ff
-
SSDEEP
384:JPCG5FOQLwBacU2XbKvdnqLn1aeL1k6AnlhOzCA:JPnL1LUa2bKYaO10hOzCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 631ed20b27d862af4653fe87b1e63f17_JaffaCakes118
Files
-
631ed20b27d862af4653fe87b1e63f17_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa724a54f658d5c75eeb195caf2c8e15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
AllocConsole
AttachConsole
CreateProcessA
GetConsoleDisplayMode
GetVersionExA
ReadFile
PeekNamedPipe
GetExitCodeProcess
SetStdHandle
Process32Next
Process32First
WriteConsoleInputA
OpenProcess
WriteFile
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CreateMutexA
CopyFileA
CreateDirectoryA
ExitProcess
lstrlenA
GetModuleHandleA
GetComputerNameA
CreatePipe
GetLocalTime
CreateThread
WaitForSingleObject
CloseHandle
GetComputerNameExA
Sleep
TerminateProcess
FreeConsole
CreateToolhelp32Snapshot
GetLastError
GetStartupInfoA
msvcrt
_strnicmp
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strlen
strcpy
??2@YAPAXI@Z
sprintf
atoi
strcat
_strcmpi
strchr
__CxxFrameHandler
memset
sscanf
strrchr
memcpy
wininet
InternetSetOptionA
InternetOpenA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetQueryOptionA
HttpSendRequestA
InternetReadFile
InternetOpenUrlA
InternetConnectA
InternetCloseHandle
userenv
GetUserProfileDirectoryA
advapi32
CloseServiceHandle
OpenSCManagerA
ControlService
OpenServiceA
StartServiceA
OpenProcessToken
GetUserNameA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
EnumServicesStatusExA
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
secur32
GetUserNameExA
netapi32
DsGetDcNameA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ