Static task
static1
Behavioral task
behavioral1
Sample
b32a95c01ad2a703953d5efa531c4f9e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b32a95c01ad2a703953d5efa531c4f9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b32a95c01ad2a703953d5efa531c4f9e_JaffaCakes118
-
Size
596KB
-
MD5
b32a95c01ad2a703953d5efa531c4f9e
-
SHA1
355eef1165153e6bc0729053d4c6e6c3250ca7c0
-
SHA256
5764fac43db8c3aabe340badcce2c77961714c04507cc6cb65235964fd3686dd
-
SHA512
fdcb20885868d209df0769e5c6549288db6cc56a07fd4c3fb59657a36cbbdd8b3aad11c565c074a2b553b2def66c32395c70a68d209d9278a68646c6020a0118
-
SSDEEP
6144:RfFvXrf87o8JWSkM6UWgyVL64AThtpHdVP3SAJuQp4tQ7t:77f8DcVuRThvHbncxut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b32a95c01ad2a703953d5efa531c4f9e_JaffaCakes118
Files
-
b32a95c01ad2a703953d5efa531c4f9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d7206b874dc1691f57417494e6d12d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostbyname
inet_addr
htons
connect
shutdown
closesocket
socket
send
select
__WSAFDIsSet
kernel32
GetCurrentProcess
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
MultiByteToWideChar
Sleep
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
GetLastError
CopyFileA
WideCharToMultiByte
ExitThread
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
SetFilePointer
GetFileSize
GetSystemDirectoryA
ExitProcess
CreateProcessA
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
FileTimeToSystemTime
FileTimeToLocalFileTime
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
SetFileAttributesA
GetFileAttributesA
GetTempPathA
GetComputerNameA
TerminateProcess
lstrcmpiA
CreateThread
DeleteFileA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
SetConsoleCtrlHandler
GetLocaleInfoA
GetVersionExA
GetLogicalDrives
WaitForMultipleObjects
GenerateConsoleCtrlEvent
GlobalMemoryStatus
GetTimeFormatA
GetDateFormatA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
RaiseException
HeapSize
FlushFileBuffers
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
Sections
MEW Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE