Static task
static1
Behavioral task
behavioral1
Sample
8a55a3d703e45768e0b8bb114db954d5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8a55a3d703e45768e0b8bb114db954d5_JaffaCakes118
-
Size
78KB
-
MD5
8a55a3d703e45768e0b8bb114db954d5
-
SHA1
c0765e9e3bf61ab1e3c6df74d49b5bbb7400b408
-
SHA256
460a82141c3e64113143b2c5c31ad2e8c62c36c51ac12195199fecf6b6ae2145
-
SHA512
c6e035b232d2bfdf406bce4d2c086aac1ea2f9584baa5e829c4920c630d4dff6950b21115a22dfe78a13a7ca74eedd40d7245cf437fae6a7af8836978d122946
-
SSDEEP
1536:9gibp0QDX2F6dWdvOmFmWE4KI/W+0HV1JTnoL0BsxDWvCm:pbp0fFSQp+wW+6V1JTnoL0BsxWCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a55a3d703e45768e0b8bb114db954d5_JaffaCakes118
Files
-
8a55a3d703e45768e0b8bb114db954d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
faf17da8bfa52bab6dee592a3f4ae6c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
shutdown
inet_ntoa
ntohl
htonl
ioctlsocket
setsockopt
bind
listen
accept
getsockname
inet_addr
gethostbyname
select
WSAStartup
WSACleanup
htons
socket
connect
send
closesocket
recv
user32
CharLowerA
advapi32
ControlService
CreateServiceA
LockServiceDatabase
QueryServiceLockStatusA
ChangeServiceConfig2A
UnlockServiceDatabase
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
DeleteService
shfolder
SHGetFolderPathA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
SetFilePointer
GetModuleFileNameA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
CloseHandle
CreateProcessA
ExitThread
ExitProcess
GetTempPathA
lstrcmpiA
Sleep
ReleaseMutex
GetTickCount
CreateMutexA
SetFileAttributesA
GetLastError
CreateDirectoryA
GetModuleHandleA
OpenMutexA
SetErrorMode
CopyFileA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
SetFileTime
GetFileTime
CreateFileA
GetSystemDirectoryA
SetEvent
DeleteFileA
LocalFree
LocalAlloc
TerminateThread
WaitForSingleObject
CreateThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
WriteFile
ReadFile
GetEnvironmentVariableA
GetVersionExA
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE