Static task
static1
Behavioral task
behavioral1
Sample
c95053f39c8192a919b2ef69c257c07e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c95053f39c8192a919b2ef69c257c07e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c95053f39c8192a919b2ef69c257c07e_JaffaCakes118
-
Size
11KB
-
MD5
c95053f39c8192a919b2ef69c257c07e
-
SHA1
37d09da1c3d4a8dacd0673d6e0fabf9151f72376
-
SHA256
94f6041fa181d868677409c8aca574c925882b6bf97278bdcded318f9e6de82c
-
SHA512
8e9ef46df3e64115c4538036d0b4b7a877bcd6538a4e6e8de313abe0c5be93c62cd81283224e41fe0570190d533f59ea7e1cc62f9be9c04c54dcd9f67c219580
-
SSDEEP
192:dPFiACOYFP38tdpQi8vXFP1uHLx6y/Z8BnH1M94U8dI1dJu:fiAC9CpQi8furx6yx8BnK94U8ci
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95053f39c8192a919b2ef69c257c07e_JaffaCakes118
Files
-
c95053f39c8192a919b2ef69c257c07e_JaffaCakes118.exe windows:4 windows x86 arch:x86
71132f966e3acb121728ff5c0a622a55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
sprintf
memcpy
strncpy
strlen
kernel32
GetModuleHandleA
HeapCreate
GetTempPathA
GetModuleFileNameA
Sleep
CreateMutexA
GetLastError
CloseHandle
ExitProcess
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
HeapDestroy
GetTempFileNameA
CreateFileA
WriteFile
FindFirstFileA
FindClose
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CreateThread
HeapAlloc
HeapFree
HeapReAlloc
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
wsock32
htons
inet_addr
socket
connect
send
recv
gethostbyname
closesocket
WSACleanup
WSAStartup
shell32
ShellExecuteA
Sections
.code Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ