Static task
static1
Behavioral task
behavioral1
Sample
b632fc901e33fa77eebe0160f015a802_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b632fc901e33fa77eebe0160f015a802_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b632fc901e33fa77eebe0160f015a802_JaffaCakes118
-
Size
36KB
-
MD5
b632fc901e33fa77eebe0160f015a802
-
SHA1
206e99aee76895b109178572f79c51354beea910
-
SHA256
9b21304d96e76a74a9d3443ba5a1e7b384aee43cc92c7e11410209347272f4c5
-
SHA512
b9913024c799aa759ee7d9896d74af3b7464fdcd30bf6e4ae7103e62ed671d7d158641d7f0004946fe10e9f84f6f28f49ee2238cf85232f02ed66a2520ed4c6b
-
SSDEEP
768:nkCdejIbZ/IGCNwWDvuuIf4X5R8yrcw//vZN:pdHB8pvuuIf2RTrcsZN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b632fc901e33fa77eebe0160f015a802_JaffaCakes118
Files
-
b632fc901e33fa77eebe0160f015a802_JaffaCakes118.exe windows:4 windows x86 arch:x86
526bab693043fcc1003694c8fecce6e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
CopyFileA
SetThreadPriority
GetCurrentProcess
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
GlobalMemoryStatusEx
ExitProcess
GetLastError
CreateMutexA
GetModuleHandleA
GetStartupInfoA
WinExec
GetSystemTimes
WaitForSingleObject
CloseHandle
TerminateThread
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
Sleep
ExitThread
GetModuleFileNameA
GetTickCount
user32
MessageBoxA
wsprintfA
advapi32
CreateServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
RegOpenKeyExA
RegSetValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
shell32
ShellExecuteExA
SHChangeNotify
ws2_32
gethostbyname
WSAGetLastError
select
__WSAFDIsSet
recv
shutdown
WSAIoctl
WSASocketA
WSACleanup
gethostname
setsockopt
inet_ntoa
htonl
htons
socket
connect
send
closesocket
inet_addr
winmm
timeGetTime
iphlpapi
GetIfTable
msvcrt
_except_handler3
_iob
fprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
??2@YAPAXI@Z
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
strncmp
strrchr
free
sprintf
_ftol
_CxxThrowException
__CxxFrameHandler
malloc
rand
srand
time
printf
strstr
realloc
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 515KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ