Static task
static1
Behavioral task
behavioral1
Sample
dc92b96b9e25cd5fc631299b745c0349_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc92b96b9e25cd5fc631299b745c0349_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc92b96b9e25cd5fc631299b745c0349_JaffaCakes118
-
Size
27KB
-
MD5
dc92b96b9e25cd5fc631299b745c0349
-
SHA1
7758393ba5dd91cdf43004d1b83922db98a4263b
-
SHA256
5d92fb9a2bc9489949fc33c007e53766be27422f7170d4a7be4beb27ddf9be82
-
SHA512
b45fbd6913e2576933bb738e4325342c1f644077cee9c0b4dacb749a2052637faaebff67e66b7f3a15ecba13617f5bd09ddcdd41ea9f49aec51744fead73f065
-
SSDEEP
768:nz8ab8At4CGTaKVXQxN2QzXQrlfdomG9TJdd:zbgAt433ZQxN2x3el
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc92b96b9e25cd5fc631299b745c0349_JaffaCakes118
Files
-
dc92b96b9e25cd5fc631299b745c0349_JaffaCakes118.exe windows:4 windows x86 arch:x86
303a700b8d568e2d41e22338bdbb949c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetLastError
lstrlenA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
CreateFileA
WriteFile
FlushFileBuffers
CloseHandle
GlobalFree
GetTickCount
ReleaseMutex
ExitProcess
RtlZeroMemory
ExitThread
TerminateThread
TerminateProcess
CreateThread
GlobalAlloc
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GlobalLock
GlobalHandle
GlobalUnlock
GetFileSize
ReadFile
user32
GetClassNameA
IsWindowVisible
FindWindowA
FindWindowExA
EnumWindows
SetForegroundWindow
SetFocus
advapi32
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptDecrypt
CryptDestroyKey
comctl32
InitCommonControls
ws2_32
WSACleanup
listen
accept
closesocket
recv
send
shutdown
WSAStartup
htons
socket
bind
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ