Static task
static1
Behavioral task
behavioral1
Sample
bac0634eca3c70c63d54eb7e5908aece_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bac0634eca3c70c63d54eb7e5908aece_JaffaCakes118
-
Size
1.6MB
-
MD5
bac0634eca3c70c63d54eb7e5908aece
-
SHA1
b1a8a43045d239736d8d45b0bf40646e5e137e01
-
SHA256
dd65d86aeb28852dc7f83363787fa74cbac23f3e28069e13121399c77e14f5f3
-
SHA512
99504c195e03ca578c3c8d162d37586580b121a014c66eecc2c3606e422e2b7d2228a14ccb15a443d7eef4ea357e20f917ae84cc60125c3f658efb7ee3fb6670
-
SSDEEP
12288://vGyHNcwHH0l6+vvbLe9zmyuQpcK1N2oAypc7VDd/U0iYQYexs0bdrdtcEiP/3d://dBHH0RvfeYgcg2Bye7v80zyhrc/7z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bac0634eca3c70c63d54eb7e5908aece_JaffaCakes118
Files
-
bac0634eca3c70c63d54eb7e5908aece_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ce5ad8bb673cb01208bc4a15749e6ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
SetSystemPowerState
GetCPInfo
GetProfileStringW
VirtualProtect
lstrlenA
lstrcmpiA
LCMapStringA
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
LCMapStringW
ws2_32
ioctlsocket
listen
ntohl
inet_addr
select
recv
send
socket
Sections
.text Size: 336KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ