Static task
static1
Behavioral task
behavioral1
Sample
082176b99b47edac516969c80c08a443_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
082176b99b47edac516969c80c08a443_JaffaCakes118
-
Size
164KB
-
MD5
082176b99b47edac516969c80c08a443
-
SHA1
f133b129d6efb1adbbe6dfeb46e15a17449aac52
-
SHA256
dc794dc8483fde70ba0a4e01da32cbedabb3b0c97e616f27a3dc93d20d25a5b3
-
SHA512
ac2fefe42e6096692cdfa07c36295d5e97530898c041f0a716c61d1915c84e62712f0d53c659460778b09df03befe6a5d5a5b43ba3ce7c50e8d5a16b727ea9f0
-
SSDEEP
1536:b5WECyOZdWifkuEr+4uC2S/QHTXE/Isc0JQ4rGP6dxudXalIKyrKPQt:922i8uO11X2g4cxIXal3PQt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082176b99b47edac516969c80c08a443_JaffaCakes118
Files
-
082176b99b47edac516969c80c08a443_JaffaCakes118.exe windows:4 windows x86 arch:x86
66479d707c63c6199bbbb7d0006522df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetTickCount
SetFilePointer
CreateProcessA
GetLastError
DeleteFileA
GetCurrentThreadId
GetTempPathA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
GetVersionExA
MultiByteToWideChar
GetACP
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
ReleaseMutex
CreateMutexA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
CompareStringW
ResetEvent
ReadFile
SetEndOfFile
GetOEMCP
GetCPInfo
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
OutputDebugStringA
SetEvent
CreateEventA
CreateThread
lstrlenA
GetFileAttributesA
FindFirstFileA
FindClose
WriteFile
CloseHandle
WaitForSingleObject
VirtualFree
HeapCreate
GetEnvironmentVariableA
HeapSize
CreateFileA
CompareStringA
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
RaiseException
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
RtlUnwind
SetEnvironmentVariableA
user32
PostMessageA
KillTimer
LoadStringA
IsDialogMessageA
SetTimer
SendMessageA
LoadImageA
GetSystemMetrics
PostQuitMessage
DestroyWindow
FindWindowA
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
GetParent
GetWindowLongA
SetWindowLongA
DialogBoxParamA
GetActiveWindow
IsDlgButtonChecked
EndDialog
DefWindowProcA
CheckDlgButton
CallWindowProcA
CreateDialogParamA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
advapi32
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
StartServiceA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
ole32
CoCreateInstance
CoInitialize
CoUninitialize
comctl32
InitCommonControlsEx
ws2_32
shutdown
WSACleanup
closesocket
WSACreateEvent
WSAEnumNetworkEvents
WSAStartup
WSAEventSelect
recv
send
WSAGetLastError
connect
socket
htons
gethostbyname
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ