Static task
static1
Behavioral task
behavioral1
Sample
d3c9c14a5ab550b37cecf748734218a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d3c9c14a5ab550b37cecf748734218a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3c9c14a5ab550b37cecf748734218a1_JaffaCakes118
-
Size
257KB
-
MD5
d3c9c14a5ab550b37cecf748734218a1
-
SHA1
747b4a2eb5702faea5c5c32374d04bfb78a6a9b8
-
SHA256
52c76748f4f1599a5422b9c51ef7cd2a4208506ac2d3a66b3e1aaf22a3cd0f57
-
SHA512
8d974ae46b46c82b9a6f438bc1f1b18a5039db4b79c7368d8c78a7e1543326068b0ee07d167284da2ffd111fa29586511f475c3eb13e0dd6645bb85a63af053a
-
SSDEEP
6144:2z2GeHKp3NIUotBCnWCnrcFwBN4qqDLud:2z0qp3NI1CnQFwBNdqnu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3c9c14a5ab550b37cecf748734218a1_JaffaCakes118
Files
-
d3c9c14a5ab550b37cecf748734218a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
22babd4d2b4da0758ae62d7d8c69db7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
socket
setsockopt
ioctlsocket
bind
htons
WSACleanup
WSAStartup
closesocket
inet_addr
inet_ntoa
getsockname
gethostname
sendto
WSAGetLastError
recvfrom
ntohs
gethostbyname
comctl32
ord17
kernel32
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoA
LoadLibraryA
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
SetWaitableTimer
CreateWaitableTimerA
CloseHandle
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
ReadConsoleA
FlushConsoleInputBuffer
SetConsoleMode
GetStdHandle
SetConsoleCtrlHandler
CreateThread
SetConsoleTitleA
AllocConsole
GetTickCount
GetLocalTime
GetModuleHandleA
TerminateThread
GetConsoleWindow
lstrlenA
MulDiv
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
SetHandleCount
ReadFile
MultiByteToWideChar
HeapSize
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
WriteFile
GetProcAddress
GetModuleHandleW
HeapCreate
SetEndOfFile
GetProcessHeap
GetCurrentProcessId
VirtualAlloc
VirtualFree
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
GetCurrentThreadId
ExitThread
RtlUnwind
HeapReAlloc
HeapAlloc
GetLastError
HeapFree
user32
SetForegroundWindow
SendMessageA
SetWindowTextA
CreateWindowExA
EndPaint
DrawTextA
BeginPaint
GetClientRect
PostQuitMessage
GetWindowTextA
DefWindowProcA
MessageBoxA
IsDialogMessageA
DrawFocusRect
SetFocus
GetFocus
GetKeyState
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
RedrawWindow
GetWindowLongA
GetParent
GetWindow
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetWindowTextLengthA
GetDC
ReleaseDC
GetWindowRect
LoadIconA
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetDlgItem
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
UnregisterClassA
wvsprintfA
gdi32
DeleteObject
SetBkColor
SetTextColor
ExtTextOutA
GetDeviceCaps
CreateCompatibleDC
SelectObject
DeleteDC
GetTextMetricsA
CreateFontA
sqlite3
sqlite3_close
sqlite3_errmsg
sqlite3_open
sqlite3_finalize
sqlite3_column_text
sqlite3_step
sqlite3_prepare_v2
sqlite3_column_double
sqlite3_column_int
Sections
.text Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 942KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ