Static task
static1
Behavioral task
behavioral1
Sample
ec5db40bbcdc55b5b846e4fc33f00097_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec5db40bbcdc55b5b846e4fc33f00097_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec5db40bbcdc55b5b846e4fc33f00097_JaffaCakes118
-
Size
243KB
-
MD5
ec5db40bbcdc55b5b846e4fc33f00097
-
SHA1
e18e1e05a3b5aa4346451511288ce8a433796d9e
-
SHA256
a3b177479b6a0358f3dd3b96f212bad81277a2a2c92b544d1a4440b1c8bcc069
-
SHA512
d8ff81c97895352b58cec485c7bbd4abdcc056bbb02ebdaa841cdf6ab94807caeef91e05e22e5e6ec524e205ce4a919096c8924d94fa0d7ed3407acfcb8bbc6b
-
SSDEEP
6144:LvoMvtQYA99LIxGtp7gZQ+4CcxYc/ZwyUiYQw4dAN9inWTY+otHbyYuZkqQm:LvoMvtQYA9KxGtGW2cBRUmd8onWM+2kH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec5db40bbcdc55b5b846e4fc33f00097_JaffaCakes118
Files
-
ec5db40bbcdc55b5b846e4fc33f00097_JaffaCakes118.exe windows:4 windows x86 arch:x86
629ad4071da9f0aaa4b7c4ff3ccd1989
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
inet_addr
gethostname
gethostbyname
iphlpapi
GetBestInterface
GetIpAddrTable
kernel32
GetProcessHeap
TlsAlloc
WaitForSingleObject
lstrcpyW
lstrlenW
CreateEventW
CreateMutexW
FreeLibrary
GlobalAlloc
ExpandEnvironmentStringsW
GetModuleHandleW
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
IsValidLocale
BeginUpdateResourceW
GetProcAddress
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
uxtheme
GetThemeFont
DrawThemeBackground
CloseThemeData
GetThemeBackgroundRegion
DrawThemeEdge
GetThemeSysBool
scecli
SceSetupUpdateSecurityService
SceGetDatabaseSetting
DeltaNotify
SceProcessSecurityPolicyGPO
SceSetupMoveSecurityFile
SceSvcSetInformationTemplate
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UsNfGf Size: 3KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.APdHNF Size: 1KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ER Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oUlM Size: 512B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NJh Size: 91KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RQmp Size: 2KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.OInf Size: 120KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ