Static task
static1
Behavioral task
behavioral1
Sample
68a8b35f3331d1dd9d3810521fccbdb8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68a8b35f3331d1dd9d3810521fccbdb8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68a8b35f3331d1dd9d3810521fccbdb8_JaffaCakes118
-
Size
44KB
-
MD5
68a8b35f3331d1dd9d3810521fccbdb8
-
SHA1
b488b13013e2c00ea517d15513c1f844e0b67ceb
-
SHA256
9939e3d6f98d462c1b8f96449746e847a605f141b0e44a9096094f738b83fa71
-
SHA512
5c2d57b2418930ef32f93789017e7ecd41365a2076934872a08c5f8b820fd0ec6485f13af6935eb543bd12d2904f692817c77849a98828f21401b15d1fed250a
-
SSDEEP
768:K4vtlLIFVFDAmk9OFEBSZ0NUaY367WXKll:PFcBmOFE0Zi9Yfql
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a8b35f3331d1dd9d3810521fccbdb8_JaffaCakes118
Files
-
68a8b35f3331d1dd9d3810521fccbdb8_JaffaCakes118.exe windows:4 windows x86 arch:x86
7988742e7ada2677c0434e238b72e2d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateMutexA
lstrcpyA
ReleaseMutex
WinExec
GetProcAddress
LoadLibraryA
CreateThread
CloseHandle
GetModuleFileNameA
Sleep
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateFileA
ReadFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
SetFilePointer
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
LCMapStringW
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ws2_32
recv
gethostname
inet_ntoa
inet_addr
gethostbyname
socket
connect
send
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
closesocket
WSAStartup
htons
urlmon
URLDownloadToFileA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE