Static task
static1
Behavioral task
behavioral1
Sample
7794c092807f95e16169d103df98c4c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7794c092807f95e16169d103df98c4c3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7794c092807f95e16169d103df98c4c3_JaffaCakes118
-
Size
202KB
-
MD5
7794c092807f95e16169d103df98c4c3
-
SHA1
4d2a63a9ff337fda494f653dca1b05eb12138cdc
-
SHA256
51c8cede5cd4c2bd7d98e3d8deff7b8b3bbbb82b202cc4f5f0a4eb6b2f8855e9
-
SHA512
0d27a680a4ab148374b6a50a6a4e2369f0a95fb1d0a73811abf5f586f9a5c620a1de5814fca281cc64234b4925bdfbc2b016842a7e1fe096a483405673209873
-
SSDEEP
6144:zAMSNyAT/5eCOaQNprg7MSN18yCGC32jK:0MahgNpM7ME18yQ3F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7794c092807f95e16169d103df98c4c3_JaffaCakes118
Files
-
7794c092807f95e16169d103df98c4c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
4769218e2a2db00b11b5d12d51e2752c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolderA
ws2_32
WSAAsyncGetProtoByNumber
getsockname
WSARecv
WSAResetEvent
WSAAccept
kernel32
SetThreadPriorityBoost
SetEnvironmentVariableW
MultiByteToWideChar
GetOEMCP
CreateWaitableTimerA
ConnectNamedPipe
GetEnvironmentVariableW
GetCommState
lstrcatW
GlobalDeleteAtom
SetProcessWorkingSetSize
GetSystemTime
GetFileInformationByHandle
UnmapViewOfFile
CreateFileW
LCMapStringA
FindResourceExW
FormatMessageW
CreateEventA
GetProfileStringA
FreeLibraryAndExitThread
SetConsoleOutputCP
CompareStringA
PurgeComm
VirtualQueryEx
GetSystemDefaultLangID
CreateMutexA
TryEnterCriticalSection
SetProcessShutdownParameters
ExitThread
WritePrivateProfileSectionW
EnumDateFormatsW
PrepareTape
FindFirstFileW
FlushConsoleInputBuffer
GetFullPathNameA
SetConsoleMode
IsDBCSLeadByteEx
DuplicateHandle
FindCloseChangeNotification
LoadResource
_hread
EnumResourceNamesW
EndUpdateResourceA
RaiseException
VirtualFree
WriteConsoleOutputW
FindNextChangeNotification
PeekConsoleInputW
LoadLibraryExA
IsProcessorFeaturePresent
EnumSystemCodePagesA
SetCurrentDirectoryA
IsBadWritePtr
WritePrivateProfileStringA
ReleaseMutex
WriteProcessMemory
SetThreadAffinityMask
FreeResource
GenerateConsoleCtrlEvent
GetUserDefaultLangID
GlobalAddAtomA
ReadFile
GetCompressedFileSizeW
WritePrivateProfileStringW
GetUserDefaultLCID
SetEnvironmentVariableA
DebugBreak
VirtualLock
GetModuleHandleA
SetConsoleTitleA
GetFileType
SwitchToFiber
GetNumberFormatW
CompareStringW
GetCommConfig
GetCommandLineA
VirtualAlloc
ExitProcess
EnumCalendarInfoW
ReadConsoleA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
oleaut32
VariantChangeType
SafeArrayGetElement
SafeArrayGetLBound
QueryPathOfRegTypeLi
SafeArrayRedim
VariantCopy
SysFreeString
SafeArrayUnaccessData
SafeArrayPutElement
LoadTypeLibEx
LoadTypeLi
advapi32
RegisterServiceCtrlHandlerA
CloseServiceHandle
ObjectCloseAuditAlarmW
ImpersonateLoggedOnUser
AddAce
MapGenericMask
SetTokenInformation
ReportEventA
user32
GetSystemMenu
GetScrollPos
GetMessageA
LoadIconA
GetUpdateRect
MapWindowPoints
EndDeferWindowPos
RegisterClipboardFormatA
GetProcessDefaultLayout
GetClassInfoA
DrawTextExA
SwapMouseButton
GetTabbedTextExtentW
SetWindowContextHelpId
DeleteMenu
ScrollWindow
InflateRect
SetRectEmpty
UnregisterHotKey
InsertMenuW
GetMenuInfo
DefWindowProcA
ole32
OleFlushClipboard
CoReleaseMarshalData
OleRegGetMiscStatus
OleCreateLink
GetRunningObjectTable
CoFileTimeNow
CoGetInterfaceAndReleaseStream
comctl32
ImageList_GetDragImage
ImageList_SetIconSize
InitCommonControlsEx
gdi32
CreatePen
msvcrt
_open_osfhandle
_flushall
_stat
_strupr
_locking
_strcmpi
clearerr
vfwprintf
strerror
gmtime
_itow
_strlwr
_popen
__doserrno
_snprintf
_wsystem
ftell
vfprintf
mbtowc
_spawnlp
_wcsicoll
wcstombs
wcscat
tolower
_eof
ctime
_tzset
_sleep
_wspawnvp
fread
_mbsnbicmp
_mbsnbcat
fprintf
longjmp
remove
strstr
_strnicoll
atoi
_wchdir
_wstrtime
fflush
strncat
_get_osfhandle
_vsnprintf
fwprintf
isleadbyte
_mbsnbcmp
_wgetcwd
isxdigit
srand
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ