Static task
static1
Behavioral task
behavioral1
Sample
c8b63df03340d5fe545db5184c313835_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8b63df03340d5fe545db5184c313835_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8b63df03340d5fe545db5184c313835_JaffaCakes118
-
Size
40KB
-
MD5
c8b63df03340d5fe545db5184c313835
-
SHA1
d4eff6ac3dd1c7981fd89c5a275b10d193294f64
-
SHA256
5039aea564909a2ee9daf7b526dd65faddba7759e61a2f059b9430ae715b737e
-
SHA512
bf87f158c25dae3076857477bb6068a1ce3485a54ae42ed667860cacacb0c40c827b66ea41e530b495ae7f36cd7ac5bc2d5b15e8e87898bd357931106ea5a9ca
-
SSDEEP
384:ILmw3mUCnmdTYoSNMV1wzwWojeSSyhmlK6gY9Omlu+oGsw90HKafJohj:Imw3KmFYo7V/WZSSBgKXu+oGsw9eoh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8b63df03340d5fe545db5184c313835_JaffaCakes118
Files
-
c8b63df03340d5fe545db5184c313835_JaffaCakes118.exe windows:4 windows x86 arch:x86
74fa3350782cadc1062f616d03b56c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LocalFree
FormatMessageA
Sleep
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
SetFilePointer
RtlUnwind
HeapFree
VirtualFree
HeapCreate
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
WriteFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
CloseHandle
ws2_32
recv
socket
ioctlsocket
connect
WSAGetLastError
select
__WSAFDIsSet
setsockopt
gethostbyname
send
closesocket
htons
inet_addr
WSAStartup
WSACleanup
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE