Static task
static1
Behavioral task
behavioral1
Sample
d69492ea7430c3069fa9db1fe000d30f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d69492ea7430c3069fa9db1fe000d30f_JaffaCakes118
-
Size
1.1MB
-
MD5
d69492ea7430c3069fa9db1fe000d30f
-
SHA1
7d8d52d43b4adecb4630142235c300c53440de10
-
SHA256
bec6a208185308dcf54e20ff8f7e66243dc22aef15bdbb5ebffe13b1644980c9
-
SHA512
4357c1acac8d9dbe8dbdff82770be779831a7a1216d8c2761ec74d592d0e3624666f67a900c2eea8b73576ede89a4e04f37dca8e401ec9d832498fc6b4c1cc4b
-
SSDEEP
12288:/PvGyHNcwHH0l6+vvbLe9zmyuQpcK1N2oAypc7VDd/U0iYQYexs0bQrdtcEiP/3l:/PdBHH0RvfeYgcg2Bye7v80zykrc//
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d69492ea7430c3069fa9db1fe000d30f_JaffaCakes118
Files
-
d69492ea7430c3069fa9db1fe000d30f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ce5ad8bb673cb01208bc4a15749e6ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
SetSystemPowerState
GetCPInfo
GetProfileStringW
VirtualProtect
lstrlenA
lstrcmpiA
LCMapStringA
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
LCMapStringW
ws2_32
ioctlsocket
listen
ntohl
inet_addr
select
recv
send
socket
Sections
.text Size: 336KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ