Static task
static1
Behavioral task
behavioral1
Sample
660c8b33fe9b5a57c1b3205719449054_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
660c8b33fe9b5a57c1b3205719449054_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
660c8b33fe9b5a57c1b3205719449054_JaffaCakes118
-
Size
256KB
-
MD5
660c8b33fe9b5a57c1b3205719449054
-
SHA1
85f5fda0a1d5b764fbec6e8a13b2591894bc7451
-
SHA256
1db32f1c4abc058c0016edbd867e3a86d34938788ebe467f404139f1eb3cbee5
-
SHA512
856740d9e009882573d52d8ef803d474fa0768643f9cafcaf655ef00106edd035811ceb15494198385567a3e0daf3a4a6f8d7824a366d6109c8232a3f47b0bce
-
SSDEEP
6144:b5JsJ+LTvefonj44IEyFBInpCV62ayxr5ORdTE1dUI+W+qx:b5V/veQnj3zg61yd5wbI+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660c8b33fe9b5a57c1b3205719449054_JaffaCakes118
Files
-
660c8b33fe9b5a57c1b3205719449054_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa3f5739f6c86b6aaea16480b458a142
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
GetComputerNameA
TerminateProcess
OutputDebugStringA
GetLastError
CreateMutexA
DeleteFileA
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceExA
OpenFile
WaitForSingleObject
CreateThread
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateProcessA
Sleep
GetLocalTime
lstrlenA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
SetEnvironmentVariableA
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetProcAddress
GetCurrentProcess
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
CloseHandle
WriteFile
ReadFile
WideCharToMultiByte
user32
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
GetParent
CloseDesktop
SetForegroundWindow
EnumDesktopWindows
PostMessageA
CreateDesktopA
OpenDesktopA
SendMessageA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
shell32
SHGetSpecialFolderPathA
ws2_32
WSAGetLastError
WSAStartup
connect
setsockopt
socket
htons
send
recv
closesocket
shutdown
gethostbyname
WSACleanup
inet_addr
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ