Static task
static1
Behavioral task
behavioral1
Sample
ec06311112c46ebf30d3f84e7393b357_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ec06311112c46ebf30d3f84e7393b357_JaffaCakes118
-
Size
116KB
-
MD5
ec06311112c46ebf30d3f84e7393b357
-
SHA1
57d0a286fcc4fda4c1fb96d12d7517fa4c9a6df2
-
SHA256
21b9470a4df4ddd64a326905fba09c260aa1971aa542715db6c3a7b1f609b2fd
-
SHA512
cc8a49c69c3c049f5ee9a136daa0456255f9aa8805188ac5fba5e4b13de02be406a5d7e5cf1fe6e28304190926e87637766bca7393c857c58115cb588a53c923
-
SSDEEP
3072:B3aFOPYgLfxZo2idwCzMVYuYqkmEjQzLF/Go:wAPYgLBZC4yuImEjQzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec06311112c46ebf30d3f84e7393b357_JaffaCakes118
Files
-
ec06311112c46ebf30d3f84e7393b357_JaffaCakes118.exe windows:4 windows x86 arch:x86
888a652af78189d2a93205079fbc3058
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetLastError
CopyFileA
GetSystemDefaultUILanguage
GetStartupInfoA
GetModuleHandleA
GetTempPathA
WinExec
lstrlenA
MultiByteToWideChar
OpenMutexA
ReleaseMutex
ExitProcess
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
LoadLibraryA
GetProcAddress
CloseHandle
CreateThread
lstrcpyA
OutputDebugStringA
Sleep
ExitThread
GetTickCount
lstrcatA
GetSystemInfo
user32
wsprintfA
advapi32
OpenProcessToken
CreateServiceA
StartServiceA
RegOpenKeyA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenServiceA
CloseServiceHandle
DeleteService
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteExA
SHChangeNotify
msvcrt
malloc
??3@YAXPAX@Z
__CxxFrameHandler
strstr
atoi
strncpy
strcspn
wcscpy
_CxxThrowException
??2@YAPAXI@Z
strncmp
realloc
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_iob
fprintf
sprintf
_ftol
printf
time
srand
rand
strchr
_except_handler3
__dllonexit
ws2_32
WSACleanup
setsockopt
select
sendto
WSAStartup
send
inet_addr
gethostbyname
socket
htons
connect
closesocket
__WSAFDIsSet
recv
WSAIoctl
WSASocketA
htonl
WSAGetLastError
shlwapi
SHDeleteKeyA
netapi32
NetLocalGroupAddMembers
NetUserAdd
msvcp60
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE