Static task
static1
Behavioral task
behavioral1
Sample
d16d2387d40ad9589d9fe5af41e0ae92_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d16d2387d40ad9589d9fe5af41e0ae92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d16d2387d40ad9589d9fe5af41e0ae92_JaffaCakes118
-
Size
72KB
-
MD5
d16d2387d40ad9589d9fe5af41e0ae92
-
SHA1
5c4cdce7d170d400dfe0d24993fc9b42ab48f138
-
SHA256
f5194fc16f13fb1546f9032090af71faa5b65c43bed901e5ec322977dc71164b
-
SHA512
55ccdf27d36f1ab6d745d3c0ba45cfb2a2841750f0b553278796f32db4b0bedfc6d89bf947ae6fcb40fe77461576b2c3f3763920b2ed3901d68c582ee333dd15
-
SSDEEP
768:rJ1i1UBaeFgrALFzikW7mrA9nEm5cv9U83TSmWTXCynQhzrxzb1hnukUvqbWqTIs:rJaezM7mrA9Lyv8/CRhRzQ3sEMWd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d16d2387d40ad9589d9fe5af41e0ae92_JaffaCakes118
Files
-
d16d2387d40ad9589d9fe5af41e0ae92_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2cccafe1d8d4cf2ceefa59646ae40f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
FreeLibrary
WaitForSingleObject
WideCharToMultiByte
LocalFree
ExpandEnvironmentStringsA
SystemTimeToFileTime
FindFirstFileA
FindClose
OutputDebugStringA
FindNextFileA
GetSystemTimeAsFileTime
advapi32
RegEnumValueA
CredEnumerateA
CredFree
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoTaskMemFree
crypt32
CryptUnprotectData
ws2_32
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSASocketA
htons
connect
closesocket
WSACloseEvent
WSACleanup
WSAStartup
WSAGetLastError
WSACreateEvent
gethostbyname
WSARecv
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
memchr
free
malloc
strncmp
_stricmp
_strnicmp
_snprintf
sprintf
atoi
strncpy
strchr
fclose
strrchr
strstr
fgets
fopen
wcslen
wcscmp
_itoa
_strlwr
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE