Static task
static1
Behavioral task
behavioral1
Sample
06dffa79907e216e492114e46e710d98_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
06dffa79907e216e492114e46e710d98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06dffa79907e216e492114e46e710d98_JaffaCakes118
-
Size
133KB
-
MD5
06dffa79907e216e492114e46e710d98
-
SHA1
622022e4808d52320f1b64fdfe135d58d645e851
-
SHA256
f3fbf08eb8dc1db575a275b6c4e80f1c4e95f21bb70e00b7278aca6e7310828a
-
SHA512
01e6ef6443a1858d2fec0a32ae97fb37ab5684e184a19499ba6f7359d382b47aac153dac4b75da2ac0ddc55ff3b2e7c36cabe3fec7e0b5ccdd3dfd62dcb61d16
-
SSDEEP
1536:T++8u9iBRYGvrYXCnxVuZNF3+OyC+lWffG3v0eUKGmXBpcmPeBJ8B2oh493w:T++ZBAYCxWNFuHCgW3YMeymXBJ2o+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06dffa79907e216e492114e46e710d98_JaffaCakes118
Files
-
06dffa79907e216e492114e46e710d98_JaffaCakes118.exe windows:4 windows x86 arch:x86
4adcf32cc53395836d6c22d49591d31a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateProcessA
CloseHandle
WriteFile
CreateFileA
TransactNamedPipe
TerminateProcess
OpenProcess
Process32Next
Process32First
ExitThread
CopyFileA
GetSystemDirectoryA
CreateMutexA
GetTempPathA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetVersionExA
TerminateThread
ExpandEnvironmentStringsA
CompareStringW
CompareStringA
SetEndOfFile
GetModuleFileNameA
CreateThread
GetLastError
CreateToolhelp32Snapshot
Sleep
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
SetEnvironmentVariableA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ReadFile
user32
MessageBoxA
GetAsyncKeyState
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
shell32
ShellExecuteA
ws2_32
listen
__WSAFDIsSet
WSACleanup
inet_ntoa
ioctlsocket
bind
ntohl
htonl
recv
htons
socket
connect
closesocket
send
inet_addr
gethostbyname
setsockopt
WSAStartup
getsockname
select
accept
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ