Static task
static1
Behavioral task
behavioral1
Sample
f660ac0b97d9e785407cce3f5b4fb823_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f660ac0b97d9e785407cce3f5b4fb823_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f660ac0b97d9e785407cce3f5b4fb823_JaffaCakes118
-
Size
19KB
-
MD5
f660ac0b97d9e785407cce3f5b4fb823
-
SHA1
08229033eb087012b73f982b2f61d257561edc84
-
SHA256
173c7a1bea2d00a03523754c1cbd843e23cbdec87d0d34312237302f375b5adb
-
SHA512
a1ed338b38648085abf9644b60dba0b3b899d34eea66aa0b089b6bdcccbaa4c944a9f3314bc4aedb2aeedae6ea773724fb16ca719b81f36e318287a69dd7dc24
-
SSDEEP
384:t14FY8gfqpVPu53ue0uAvRYt4YDnFX8MjkAza52l92878nr+mo8+ssb:zGaV928m+xss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f660ac0b97d9e785407cce3f5b4fb823_JaffaCakes118
Files
-
f660ac0b97d9e785407cce3f5b4fb823_JaffaCakes118.exe windows:5 windows x86 arch:x86
974a400233caaa93d8a047d312e4e6f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
DeleteFileA
FindFirstFileA
CreateThread
GetDriveTypeA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetExitCodeProcess
OpenProcess
CopyFileA
CreateDirectoryA
RemoveDirectoryA
WinExec
CreateProcessA
CreatePipe
GetCurrentProcessId
GetLastError
GetCurrentProcess
GetSystemDirectoryA
Sleep
FindNextFileA
FindClose
VirtualFree
VirtualAlloc
TerminateProcess
GetTickCount
advapi32
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SetServiceStatus
ws2_32
recv
send
connect
inet_addr
htons
socket
closesocket
inet_ntoa
gethostbyname
accept
listen
bind
htonl
WSAStartup
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE