Static task
static1
Behavioral task
behavioral1
Sample
cdf116a754a6560a695c4cf26a7aded1_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
cdf116a754a6560a695c4cf26a7aded1_JaffaCakes118
-
Size
54KB
-
MD5
cdf116a754a6560a695c4cf26a7aded1
-
SHA1
dd7189826032335608edfe1d7281eac0bb4545bc
-
SHA256
5a7df66cae3b5326f6294db65b1e4dd6dbb05586a398e6aee119301c833b6674
-
SHA512
91203e01f6c61812070f106af38618126d16fa9ca20a9533e90cf9706da568ce74b6b7893b865e390cd3ea9be07e17f48e527aa549c758d40c3a33bfd9e6fa27
-
SSDEEP
768:cd52C4zFIB/s2+rIP3rue32t24zQ1OeeVgWJk/iayuX/4Kw7sH6cy1JM4RmX29x0:cd52C4JIFsXGroE1Ozvk/n6cy1JVt9u1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf116a754a6560a695c4cf26a7aded1_JaffaCakes118
Files
-
cdf116a754a6560a695c4cf26a7aded1_JaffaCakes118.exe windows:4 windows x86 arch:x86
136d15ddbeda98e55c317eea7e3deb5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReadFile
GetTempFileNameA
GetTempPathA
GetTickCount
Sleep
lstrlenA
CreateThread
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalFree
GlobalAlloc
GetVersionExA
lstrcpynA
CopyFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetFileSize
DeleteFileA
lstrcatA
lstrcpyA
GetCurrentThreadId
WaitForSingleObject
ResetEvent
CreateEventA
GetTimeZoneInformation
WriteFile
FileTimeToLocalFileTime
GetLocalTime
SetFileAttributesA
GetDriveTypeA
GetLogicalDriveStringsA
GlobalUnlock
GlobalLock
InterlockedDecrement
lstrcmpA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FindClose
FindNextFileA
FindFirstFileA
SetFilePointer
GetFullPathNameA
SetCurrentDirectoryA
ExitThread
GetSystemTime
GetModuleFileNameA
GetCurrentProcessId
CreateToolhelp32Snapshot
GetStartupInfoA
LocalFree
WideCharToMultiByte
GetLastError
Module32First
Module32Next
FileTimeToSystemTime
CloseHandle
user32
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
VkKeyScanA
keybd_event
CharLowerA
SetFocus
SetForegroundWindow
BlockInput
DispatchMessageA
GetMessageA
wsprintfA
ShowWindow
advapi32
RegCloseKey
RegOpenKeyExA
GetUserNameA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysFreeString
VariantInit
VariantClear
SysAllocString
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
ws2_32
connect
htons
socket
gethostbyname
inet_addr
WSACleanup
getsockname
WSAEventSelect
WSAStartup
closesocket
send
recv
accept
listen
bind
htonl
WSAGetLastError
ioctlsocket
iphlpapi
GetNetworkParams
urlmon
URLDownloadToFileA
msvcrt
__p__fmode
__p__commode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
strcat
printf
srand
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
rand
??2@YAPAXI@Z
memset
_except_handler3
strcmp
_XcptFilter
_exit
_onexit
__dllonexit
_CxxThrowException
wcslen
strtok
strncat
fgets
fgetc
ftell
fseek
rewind
strchr
toupper
strcpy
fprintf
fclose
_EH_prolog
__CxxFrameHandler
sprintf
fopen
fscanf
malloc
free
isdigit
strlen
memcpy
strstr
memcmp
Sections
.data Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE