Static task
static1
Behavioral task
behavioral1
Sample
fb34f6fa522254d85b3851b875363ec5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb34f6fa522254d85b3851b875363ec5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb34f6fa522254d85b3851b875363ec5_JaffaCakes118
-
Size
38KB
-
MD5
fb34f6fa522254d85b3851b875363ec5
-
SHA1
4198ec76caef4757f7252b0a01df43f72bde3f18
-
SHA256
2934adbb18f737133a3e2e0b8c2e3737605878c8bbb46f5df3f0f32506426fce
-
SHA512
e7b4bd2a4a42170a1aec6e8fe6c1dc46ae8a72fee4c7ae2cf5e75c7dbb511dc9607c364b643d7a37260a7b7fe6933c22cee7c4f60018ab23bafa5cd7895197ce
-
SSDEEP
768:0H3C2BrX+mF1JmBwmL0s0es6vo/DFuB6UJvI5:GdBtfZo6ug95
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb34f6fa522254d85b3851b875363ec5_JaffaCakes118
Files
-
fb34f6fa522254d85b3851b875363ec5_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
4fa117ee09c9cf4162ea6840c168025d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetUserNameA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteExA
ws2_32
socket
WSACleanup
connect
recv
closesocket
gethostbyname
WSAStartup
send
htons
msvcp60
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0_Winit@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
user32
wsprintfA
msvcrt
malloc
srand
_snprintf
printf
rand
time
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
__CxxFrameHandler
_except_handler3
strstr
vsprintf
strtok
kernel32
GetStartupInfoA
CreateMutexA
GetLastError
SetErrorMode
CreateThread
GetDriveTypeA
CreateDirectoryA
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
CopyFileA
ExitProcess
GetLocaleInfoA
GetVersionExA
GetTickCount
GetFileAttributesA
Sleep
GetComputerNameA
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE