Static task
static1
Behavioral task
behavioral1
Sample
a75673c8c91ee058c89775c9075586a0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a75673c8c91ee058c89775c9075586a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a75673c8c91ee058c89775c9075586a0_JaffaCakes118
-
Size
12KB
-
MD5
a75673c8c91ee058c89775c9075586a0
-
SHA1
12c2c5c6fe1ba65a4bd599f028b6e78fcc20353d
-
SHA256
60752aaa9645119889d8b0e223462f0d28de1b005c8cd0a8f5d66818ac2dab88
-
SHA512
b0e07068cccc4a6c18036a43c939605cbc444937a1d327e47bd8b5a55644377285af8514fc733ec1c47d147c073c9fcc07a885105cc96ad5d2668b468d77bab8
-
SSDEEP
192:1w/s3fw1bBytQXdAcgS8PbQVJkiUVZytfcVmx6oIo1:1w0Pw11ytkAfrPbQHkiqZytfcVmx6oI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a75673c8c91ee058c89775c9075586a0_JaffaCakes118
Files
-
a75673c8c91ee058c89775c9075586a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
e72193d0410c73ea312c5a2b66ecf9bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetTickCount
GetWindowsDirectoryA
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
LoadLibraryA
LocalAlloc
LocalFree
ReadFile
GetModuleFileNameA
SetFilePointer
Sleep
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
ExitThread
ExitProcess
CloseHandle
DeleteFileA
CreateThread
CreateProcessA
CreateFileA
RtlZeroMemory
user32
FindWindowExA
FindWindowA
SendMessageA
wsprintfA
ws2_32
gethostname
getsockname
htonl
htons
inet_ntoa
listen
recv
gethostbyname
send
shutdown
socket
__WSAFDIsSet
WSAStartup
WSACleanup
connect
closesocket
bind
select
accept
advapi32
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ