Static task
static1
Behavioral task
behavioral1
Sample
d34209a204b2201c199896c9676d2170_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d34209a204b2201c199896c9676d2170_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d34209a204b2201c199896c9676d2170_JaffaCakes118
-
Size
121KB
-
MD5
d34209a204b2201c199896c9676d2170
-
SHA1
398a4f6e4d9155dee32b7d298a291362758d2a99
-
SHA256
ebaa10e831c88711a5985fa197cffeebf9196edeee396d7ac0ff0bdd81f617d2
-
SHA512
36dee96dd945cf7bb7198cec929338af7e6e559d7328769260250eb62980141ac64215d4fff5c91ce20faec160f5893681bfbe0b3fee52e3bc0e0ad89e912505
-
SSDEEP
1536:0W+caYNZXeWK3O9UmGGLbQd9AVaOoNTfqrvrKQr36/uInfNIOajxG/n5oscys2DP:0WeeSOFhmmVadQTEYxk5Fsd2h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d34209a204b2201c199896c9676d2170_JaffaCakes118
Files
-
d34209a204b2201c199896c9676d2170_JaffaCakes118.exe windows:6 windows x64 arch:x64
0da19a3ce7222cb0aeb5e48884a5cccc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
bcrypt
BCryptHashData
BCryptDestroyHash
BCryptFinishHash
BCryptCreateHash
BCryptEncrypt
BCryptDuplicateHash
BCryptDestroyKey
BCryptGenRandom
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptSecretAgreement
BCryptImportKeyPair
BCryptDestroySecret
BCryptDeriveKey
BCryptExportKey
BCryptImportKey
crypt32
CryptDecodeObject
CryptBinaryToStringA
CryptStringToBinaryA
ws2_32
closesocket
gethostbyname
WSAStartup
send
socket
WSACleanup
recv
htons
setsockopt
WSAGetLastError
inet_addr
connect
inet_ntoa
secur32
InitSecurityInterfaceA
kernel32
CreateThread
TerminateThread
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
FlushFileBuffers
GetFileSize
CreateFileA
GetFileAttributesA
SetFilePointer
GetModuleFileNameA
Sleep
GetConsoleWindow
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetStdHandle
GetCurrentThreadId
GetLocalTime
GetTickCount
GetCommandLineW
LocalFree
GetEnvironmentVariableA
LoadLibraryA
ReadFile
WriteFile
user32
ShowWindow
advapi32
RegSetValueExA
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
shell32
CommandLineToArgvW
msvcrt
__CxxFrameHandler3
atexit
vprintf
free
malloc
vsprintf_s
_vscprintf
sscanf
_mkgmtime
time
wcstombs
memmove
memchr
memcmp
memcpy
memset
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ