Static task
static1
Behavioral task
behavioral1
Sample
a372b902298a19c6cd091ef3c3666db7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a372b902298a19c6cd091ef3c3666db7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a372b902298a19c6cd091ef3c3666db7_JaffaCakes118
-
Size
243KB
-
MD5
a372b902298a19c6cd091ef3c3666db7
-
SHA1
52194cf7330e2eb10f205b619be25e6a316aec19
-
SHA256
452b7265cc6b626c8f9aead93db538d15c53b58764053c6c3b439fff2557ff98
-
SHA512
3d7ce04ad5ee936aec3216151e318e2123278c6dbbb0e4f97ce71ce39e2b7f2d9aa8cee8fc23d2ef8ca1b6362b2e9e526bcf18724f59b4e114143e564b7d603f
-
SSDEEP
6144:8voMvtQYA99LIxGtp7gZQ+4CcxYc/ZwyUiYQw4dAN9inWTY+otHbyYuZkqQm:8voMvtQYA9KxGtGW2cBRUmd8onWM+2kH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a372b902298a19c6cd091ef3c3666db7_JaffaCakes118
Files
-
a372b902298a19c6cd091ef3c3666db7_JaffaCakes118.exe windows:4 windows x86 arch:x86
629ad4071da9f0aaa4b7c4ff3ccd1989
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
inet_addr
gethostname
gethostbyname
iphlpapi
GetBestInterface
GetIpAddrTable
kernel32
GetProcessHeap
TlsAlloc
WaitForSingleObject
lstrcpyW
lstrlenW
CreateEventW
CreateMutexW
FreeLibrary
GlobalAlloc
ExpandEnvironmentStringsW
GetModuleHandleW
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
IsValidLocale
BeginUpdateResourceW
GetProcAddress
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
uxtheme
GetThemeFont
DrawThemeBackground
CloseThemeData
GetThemeBackgroundRegion
DrawThemeEdge
GetThemeSysBool
scecli
SceSetupUpdateSecurityService
SceGetDatabaseSetting
DeltaNotify
SceProcessSecurityPolicyGPO
SceSetupMoveSecurityFile
SceSvcSetInformationTemplate
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UsNfGf Size: 3KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.APdHNF Size: 1KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ER Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oUlM Size: 512B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NJh Size: 91KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RQmp Size: 2KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.OInf Size: 120KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ