Static task
static1
Behavioral task
behavioral1
Sample
8c0e6eb1e27288e22b2d31c84d122f67_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c0e6eb1e27288e22b2d31c84d122f67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c0e6eb1e27288e22b2d31c84d122f67_JaffaCakes118
-
Size
228KB
-
MD5
8c0e6eb1e27288e22b2d31c84d122f67
-
SHA1
ced36b6bc4abd62f28afe6f21f0354a7120ca20b
-
SHA256
0f0f4617a73aa8ae7156b78645b6e8c40faf48e357d36bf81c6a5671c05cab59
-
SHA512
f4a68fbff26dbd558e984cf77b6a6b2f850b2c20156114b1cd83f73212fe75f57b5f520f8dedcb9515fb66019ed44debc8141cae2269b82e356d433627db7534
-
SSDEEP
6144:fs5B+1kTaLtQZpBNyL9Oj6CFFnVw5TsMBweEr:fs5B+1kTIiDvyi6CF5V3eE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c0e6eb1e27288e22b2d31c84d122f67_JaffaCakes118
Files
-
8c0e6eb1e27288e22b2d31c84d122f67_JaffaCakes118.exe windows:5 windows x86 arch:x86
ee17efba5e6b921b124c05e17ebf423d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
VirtualAlloc
VirtualProtect
VirtualFree
GetCurrentProcess
LoadLibraryW
GetProcAddress
OpenProcess
GetLastError
lstrcmpiW
WaitForSingleObject
CreateEventW
CreateThread
lstrcpyA
GetModuleHandleW
TerminateProcess
GetModuleFileNameW
GetLocalTime
lstrcpyW
GetLongPathNameW
TerminateThread
GetCurrentThreadId
GetTickCount
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetModuleFileNameA
WinExec
DeleteFileA
ExpandEnvironmentStringsA
Sleep
SetFilePointer
GetFileSize
ReadFile
WriteFile
CloseHandle
FreeLibrary
CreateFileA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetStdHandle
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
ExitProcess
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
advapi32
ControlService
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
DeleteService
shell32
ShellExecuteA
ShellExecuteW
psapi
EnumProcesses
ws2_32
WSACloseEvent
WSAEventSelect
WSACreateEvent
ntohl
inet_ntoa
accept
WSAWaitForMultipleEvents
bind
inet_addr
closesocket
shutdown
WSASocketW
WSACleanup
WSAStartup
WSAEnumNetworkEvents
WSARecv
WSAGetLastError
send
htons
shlwapi
StrCpyW
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ