Static task
static1
Behavioral task
behavioral1
Sample
944b3126714591fce6b2f967c793c82e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
944b3126714591fce6b2f967c793c82e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
944b3126714591fce6b2f967c793c82e_JaffaCakes118
-
Size
41KB
-
MD5
944b3126714591fce6b2f967c793c82e
-
SHA1
1b6ccc74e2d7eaee6782dfdb3260bc494909d66f
-
SHA256
c77710770810f47a4e19e6b9bc3989f1274cc1e81f3e6c7011345aa5be325319
-
SHA512
f48ed9ec4cd530b99639a9020f08da54638749786c54357840cce9244f7d8c9838ca979431aeed0c1b0c31bde6d2b9e65a10a2de704a14c3d4596ccde44bb349
-
SSDEEP
768:4rUtf0QaHMzhTMT/coByd2+oDD1/ce65jk1dBrHoYJ:7h0QaHQlMTqkn1/D6q5oYJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 944b3126714591fce6b2f967c793c82e_JaffaCakes118
Files
-
944b3126714591fce6b2f967c793c82e_JaffaCakes118.exe windows:4 windows x86 arch:x86
032b74c1665e5abba67a75162a7f3886
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ioctlsocket
getsockname
inet_addr
select
WSAStartup
gethostbyname
sendto
WSACleanup
htons
socket
connect
send
closesocket
recv
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
shlwapi
PathAppendW
shell32
ShellExecuteW
shfolder
SHGetFolderPathW
kernel32
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
LoadLibraryA
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
GetExitCodeProcess
GetStringTypeW
LCMapStringA
LCMapStringW
GetProcAddress
WaitForSingleObject
GetStringTypeA
CreateFileA
SetFilePointer
FlushFileBuffers
SetStdHandle
RtlUnwind
CloseHandle
CreateProcessA
ExitThread
ExitProcess
GetTempPathA
Sleep
lstrlenA
GetTickCount
CreateThread
ReleaseMutex
CreateMutexA
lstrlenW
GetModuleFileNameW
GetModuleHandleW
CreateProcessW
SetFileAttributesW
CopyFileW
ExpandEnvironmentStringsW
GetLastError
SetErrorMode
GetVersionExA
GetLocaleInfoA
TerminateThread
MultiByteToWideChar
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
WriteFile
TerminateProcess
GetCurrentProcess
GetFileAttributesA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE