Static task
static1
Behavioral task
behavioral1
Sample
ad5454f10f564fa5f7ed8a3017cd1a1e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad5454f10f564fa5f7ed8a3017cd1a1e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad5454f10f564fa5f7ed8a3017cd1a1e_JaffaCakes118
-
Size
43KB
-
MD5
ad5454f10f564fa5f7ed8a3017cd1a1e
-
SHA1
c023019757db873bd611530eeedf4361bd20c5fe
-
SHA256
c8badf621bf933f8ae0f0cc4329f81ecf0557b2c1eb2b42e78ac4004d77d4410
-
SHA512
ea86900c6a041fc3e893d2c83d7bcbdf0d53fd7f0d720b2bbfc7031536310161d30c15d8fac422dc52b509500ae125bd518700be73111a45a92fb8f32f3a5e4a
-
SSDEEP
768:39hMOeFJE3P3u3wodnCD0M5mv4It6Ent6hr4Y:3iJerIo0MIBJt6x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad5454f10f564fa5f7ed8a3017cd1a1e_JaffaCakes118
Files
-
ad5454f10f564fa5f7ed8a3017cd1a1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe9583d689556df2ab86f5b311fd2102
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACleanup
connect
socket
htons
ioctlsocket
getsockname
inet_addr
gethostbyname
WSAStartup
closesocket
recv
select
send
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
GetUserNameA
kernel32
ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LocalFree
RaiseException
SetUnhandledExceptionFilter
IsBadCodePtr
GetProcAddress
Sleep
GetTickCount
ExitThread
ExitProcess
GetLastError
CreateMutexA
SetErrorMode
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
lstrlenA
CreateThread
CloseHandle
CreateProcessA
ExpandEnvironmentStringsA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
CreateFileA
GetVersionExA
GetLocaleInfoA
TerminateThread
WaitForSingleObject
GetTempPathA
RtlUnwind
GetFileType
GetStdHandle
SetFilePointer
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WriteFile
HeapReAlloc
VirtualAlloc
HeapFree
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
HeapAlloc
GetStartupInfoA
GetCommandLineA
user32
BlockInput
SetForegroundWindow
SetFocus
ShowWindow
keybd_event
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
FindWindowExA
FindWindowA
IsWindow
shlwapi
PathRemoveFileSpecA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
VariantClear
SysAllocString
VariantInit
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE