Static task
static1
Behavioral task
behavioral1
Sample
6703b7e15c2e66e169161bb9bb48ce0e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6703b7e15c2e66e169161bb9bb48ce0e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6703b7e15c2e66e169161bb9bb48ce0e_JaffaCakes118
-
Size
122KB
-
MD5
6703b7e15c2e66e169161bb9bb48ce0e
-
SHA1
47cbb9b5fa25a95604aabc9f4253661f8fdefea1
-
SHA256
4c8967bd5f3a3e71300e016bb52c2f1f9f92bfef57a039c896c6881e7c435568
-
SHA512
c38e70a472b00ca2f5850882863dfd934a24600c0f06ee5a2c0d8f31e85056b0ba2307d4025cf997bef90654da3da4617ae7a3318afd39a3d9bf3c15e7432a0f
-
SSDEEP
3072:xKuexVSatsEAuNvquRYQL+K7C/VQqaEjQwP:xm5LBFRnyrVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6703b7e15c2e66e169161bb9bb48ce0e_JaffaCakes118
Files
-
6703b7e15c2e66e169161bb9bb48ce0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8c8d03a176a7a3f3af3809a8adf0e97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
CreateFileA
GetWindowsDirectoryA
GetSystemTime
OpenProcess
GetVersionExA
GetModuleHandleA
GetDateFormatA
SizeofResource
LockResource
RemoveDirectoryA
CreateThread
LocalFree
LocalAlloc
GetCurrentProcess
LoadLibraryA
WriteConsoleW
lstrlenA
GetStartupInfoA
user32
SetClipboardData
RegisterWindowMessageA
DestroyWindow
SendDlgItemMessageA
CheckRadioButton
SetForegroundWindow
BeginDeferWindowPos
TranslateMessage
DeferWindowPos
CreateMenu
UnregisterHotKey
GetPropA
SendMessageA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
shlwapi
PathGetDriveNumberA
PathIsUNCA
wnsprintfA
PathAppendA
AssocQueryStringA
PathRemoveFileSpecA
PathCompactPathExA
ole32
CoRegisterSurrogate
CoRegisterClassObject
OleInitialize
OleSetContainedObject
CoInitialize
ws2_32
inet_addr
send
socket
listen
ioctlsocket
recv
select
ntohl
wininet
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetErrorDlg
InternetOpenA
InternetQueryDataAvailable
InternetQueryOptionA
InternetReadFile
InternetSetOptionA
InternetWriteFile
HttpEndRequestA
InternetAttemptConnect
HttpSendRequestExA
HttpOpenRequestA
HttpAddRequestHeadersA
msvcrt
__set_app_type
realloc
free
malloc
strcmp
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
_except_handler3
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
exit
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ