Static task
static1
Behavioral task
behavioral1
Sample
dd6cfd4dbaf2aad1450ddf7b3ed19b51_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd6cfd4dbaf2aad1450ddf7b3ed19b51_JaffaCakes118
-
Size
320KB
-
MD5
dd6cfd4dbaf2aad1450ddf7b3ed19b51
-
SHA1
a38a3b74a0053f0f42473f4e762f2f2312b1861d
-
SHA256
e913ed5fdc62fcf838a6c82f9448e0a679c06be724bbb808f7c388425603a33c
-
SHA512
a938c8b0380b25718f3d75a0e5b8bc6e5c625d610429c7404e630a19ea667200ebf5fcc54e9ee76b93fa6cf523f9201b19d309ffd65f41e6c0cd578e5fd622cb
-
SSDEEP
6144:DI0UZgbHyX3FsBdysgLV2YwuN1aK9lOPpPR1vasqf2l/ix:oZWlkMe0KEPfvzBti
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6cfd4dbaf2aad1450ddf7b3ed19b51_JaffaCakes118
Files
-
dd6cfd4dbaf2aad1450ddf7b3ed19b51_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5838d6aaa3bfdc75af25bfce4c6c923
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
ReleaseMutex
OpenMutexA
MultiByteToWideChar
lstrlenA
WinExec
GetTempPathA
TerminateProcess
lstrcatA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
GetLastError
CopyFileA
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExA
GetSystemDefaultUILanguage
SetEnvironmentVariableA
CompareStringW
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
LoadLibraryA
GetProcAddress
CloseHandle
CreateThread
lstrcpyA
OutputDebugStringA
Sleep
ExitThread
OpenProcess
GetTickCount
CompareStringA
SetStdHandle
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
InterlockedIncrement
InterlockedDecrement
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapCreate
GetTimeZoneInformation
GetSystemTime
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapReAlloc
HeapAlloc
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapDestroy
user32
wsprintfA
advapi32
CreateServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenServiceA
CloseServiceHandle
DeleteService
RegQueryValueExA
shell32
SHChangeNotify
ShellExecuteExA
ws2_32
WSASocketA
WSAGetLastError
WSACleanup
select
sendto
recv
WSAIoctl
send
inet_addr
gethostbyname
socket
htons
connect
closesocket
WSAStartup
__WSAFDIsSet
setsockopt
htonl
shlwapi
SHDeleteKeyA
winmm
timeGetTime
netapi32
NetUserAdd
NetLocalGroupAddMembers
iphlpapi
GetIfTable
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE