Static task
static1
Behavioral task
behavioral1
Sample
a6eb35030f45299067a3a45e9dc7ec89_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6eb35030f45299067a3a45e9dc7ec89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6eb35030f45299067a3a45e9dc7ec89_JaffaCakes118
-
Size
100KB
-
MD5
a6eb35030f45299067a3a45e9dc7ec89
-
SHA1
03b788cfaed1edc1142866eff1758a24c4082574
-
SHA256
2758ee56798c72725a1b4910893487add059f2afd57ab9c750d54256dfebf05e
-
SHA512
55bc9390e17f23cf538590c36653929cb78d89def65d25cd055b7dd6f5de4e07370d972334e40eb232a82387482e8383b2537ea45fa9b683f1e4fb0953a2070c
-
SSDEEP
1536:PfFpviFfyn4/m2Kj+vBhki7XyFM3Vdb0WK6ccnsgKXlNhk/oS7lR:PzviyQm1j+3Db0WuXlNh0oS7lR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6eb35030f45299067a3a45e9dc7ec89_JaffaCakes118
Files
-
a6eb35030f45299067a3a45e9dc7ec89_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3e6cc5f6b8063712714b24a3a969f7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
services
SetUserAgent
GetUserAgent
DownloadFile
kernel32
Sleep
CreateProcessA
GetLastError
GetVolumeInformationA
CreateMutexA
ReleaseMutex
GetTempPathA
GetWindowsDirectoryA
GetSystemDefaultLCID
GetLocaleInfoA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameA
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
ReadFile
SetStdHandle
GetLocaleInfoW
IsBadCodePtr
HeapFree
HeapAlloc
DeleteFileA
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapReAlloc
ExitProcess
GetProcAddress
GetFileAttributesA
GetCurrentProcess
HeapSize
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetTimeZoneInformation
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualProtect
GetSystemInfo
VirtualQuery
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryA
InterlockedExchange
IsBadReadPtr
advapi32
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
ws2_32
connect
WSAStartup
htons
WSACleanup
recv
socket
closesocket
gethostbyname
send
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE