Static task
static1
Behavioral task
behavioral1
Sample
d537001abec984fc2715ac7a912b9b87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d537001abec984fc2715ac7a912b9b87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d537001abec984fc2715ac7a912b9b87_JaffaCakes118
-
Size
157KB
-
MD5
d537001abec984fc2715ac7a912b9b87
-
SHA1
27178568ed3f09b71f56638be89ca42f9e110f85
-
SHA256
c8361aa47de58e2912eb73bbf5bcb9f5333ea42f4fa40b16ed15733d1643a6cd
-
SHA512
61357d8daeb21af1e533d2862e31f6c906a3f9f52d0c5091702a0cd7b30ff710dacfbca1ec6afbf76573e45af78f56ca0e8d069f0c66a324db5fd72753239839
-
SSDEEP
3072:nhFy5nphArTbIG4WX4d/sjyVrPNuRJEoGmQE83IWlFN73jYM0mRNFV+:nhKMIG44Q/ttj3IWlF93jYM0mRNFV+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d537001abec984fc2715ac7a912b9b87_JaffaCakes118
Files
-
d537001abec984fc2715ac7a912b9b87_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb067e381eb2a5b2a319e8bb85a19c4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
lstrlenA
ReadFile
GetSystemTime
GetFileSize
GetCurrentProcessId
CreateThread
TerminateThread
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
HeapReAlloc
VirtualAlloc
VirtualFree
WriteFile
CreateFileA
lstrcatA
ExitThread
GetTickCount
lstrcmpiA
CreateMutexA
CloseHandle
ExitProcess
GetCurrentThread
SetThreadPriority
Sleep
GetCurrentProcess
RaiseException
GetLocalTime
lstrcpynA
GetSystemDirectoryA
CreateDirectoryA
lstrcmpA
GetComputerNameA
GetProcessTimes
CreateProcessA
GetVersionExA
GetTempFileNameA
GetTempPathA
WinExec
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetExitCodeThread
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
SetEvent
WaitForSingleObject
RtlUnwind
MultiByteToWideChar
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapAlloc
HeapFree
GetModuleHandleA
lstrcpyA
GetFileAttributesA
DeleteFileA
MoveFileA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
FreeLibrary
GetLastError
GetModuleFileNameA
user32
CharLowerA
wvsprintfA
wsprintfA
advapi32
InitializeAcl
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
CloseEventLog
ReadEventLogA
OpenEventLogA
RegDeleteKeyA
RegSetValueExA
IsValidAcl
ControlService
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
ole32
CoInitialize
CoUninitialize
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoInitializeSecurity
oleaut32
VariantInit
VariantClear
ws2_32
gethostbyname
WSACleanup
gethostname
inet_ntoa
htons
connect
recv
getpeername
send
setsockopt
accept
socket
closesocket
select
ioctlsocket
shutdown
WSAGetLastError
bind
listen
WSAStartup
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE