Static task
static1
Behavioral task
behavioral1
Sample
008ae0e6ee0470d63cfce121fcb52b0a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
008ae0e6ee0470d63cfce121fcb52b0a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
008ae0e6ee0470d63cfce121fcb52b0a_JaffaCakes118
-
Size
321KB
-
MD5
008ae0e6ee0470d63cfce121fcb52b0a
-
SHA1
6fd4b839aa703b1599b697cb48e71c6066ac41e6
-
SHA256
87a2128c47e471389b5776f3c2256be12a5f86e83d8feb6a35eafd26f61ca6e1
-
SHA512
8c11c4e5b437b2652c4e7ad3b0fce3be0ef8baca3d316e66da43f286bd29e558c79c02ca836bf52145381de7775fdba64f5382c8d4d11e75d44175fdba67a92f
-
SSDEEP
6144:ruzb5Vcg1c4WVm1WDXzuy1dTX6YrXV1gkXIItYQ:ruz1VV2h1dTRrV1gqV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008ae0e6ee0470d63cfce121fcb52b0a_JaffaCakes118
Files
-
008ae0e6ee0470d63cfce121fcb52b0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
58130d22c48ff9dc2f3446dabcecfe6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
netapi32
NetApiBufferFree
NetServerEnum
ws2_32
WSAStartup
gethostname
inet_ntoa
gethostbyname
mpr
WNetAddConnection2W
WNetCancelConnection2W
kernel32
GetCurrentProcess
GetVersion
GetModuleFileNameW
SetEvent
GetFileAttributesW
DisconnectNamedPipe
ReadConsoleW
ReadFile
GetFileTime
WaitNamedPipeW
SetFileAttributesW
CopyFileW
WaitForMultipleObjects
SetConsoleTitleW
DuplicateHandle
GetCurrentProcessId
TransactNamedPipe
MultiByteToWideChar
LoadLibraryExW
CreateEventW
GetExitCodeProcess
ResumeThread
SetProcessAffinityMask
GetCommandLineW
GetEnvironmentVariableW
GetFullPathNameW
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
WaitForSingleObject
GetComputerNameW
GetSystemDirectoryW
DeleteFileW
FindResourceW
SizeofResource
LoadResource
SetNamedPipeHandleState
LockResource
FormatMessageA
GetStdHandle
WriteFile
FreeLibrary
CreateFileW
CloseHandle
GetTickCount
Sleep
SetLastError
GetLastError
LocalAlloc
GetModuleHandleW
LocalFree
SetPriorityClass
LoadLibraryW
GetProcAddress
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
SetConsoleCtrlHandler
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetModuleHandleA
ExitProcess
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
RtlUnwind
CreateFileA
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
LoadCursorW
SetCursor
SetWindowTextW
SendMessageW
EndDialog
GetSysColorBrush
GetDlgItem
DialogBoxIndirectParamW
InflateRect
gdi32
SetMapMode
StartDocW
StartPage
EndPage
EndDoc
GetDeviceCaps
comdlg32
PrintDlgW
advapi32
GetSecurityInfo
CreateProcessAsUserW
OpenProcessToken
DeleteService
ControlService
OpenSCManagerW
OpenServiceW
StartServiceW
QueryServiceStatus
CreateServiceW
CloseServiceHandle
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
SetTokenInformation
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
SetSecurityInfo
FreeSid
LsaOpenPolicy
LsaEnumerateAccountRights
LookupPrivilegeValueW
LsaFreeMemory
LsaClose
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ