Static task
static1
Behavioral task
behavioral1
Sample
250e8c2d214ade513d806f36aed3cedc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
250e8c2d214ade513d806f36aed3cedc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
250e8c2d214ade513d806f36aed3cedc_JaffaCakes118
-
Size
44KB
-
MD5
250e8c2d214ade513d806f36aed3cedc
-
SHA1
bc33632993c1661eae990bd18ccee9bbbcb4e0e7
-
SHA256
fa7545efd0f2c1b6158ab5b62b3ba1e68be23c676ee67e7ad7e064f4bd85bf48
-
SHA512
639012eeeabb2367e0721452ad97b22eff05ded46b690c96d8c4e0c5ad14810e487fa4a446f8b40c86f2f1be987338bce28410c649a1d92d6b97306b8d312911
-
SSDEEP
768:+X0LhHqybO/e7wdnKTGkRF5phdhZsF6Noq:00LhHqKO/nKTGkv5ppmGo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 250e8c2d214ade513d806f36aed3cedc_JaffaCakes118
Files
-
250e8c2d214ade513d806f36aed3cedc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b48d4f95b75d3b29bfe6a5d6b20bb1d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CopyFileA
lstrcatA
GetTickCount
GetLocalTime
lstrcpyA
GetComputerNameA
GetLocaleInfoA
MultiByteToWideChar
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryA
_lclose
_lopen
GetSystemDirectoryA
WideCharToMultiByte
GetModuleFileNameA
lstrlenA
CloseHandle
Sleep
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TlsAlloc
SetLastError
TlsGetValue
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
ws2_32
gethostname
gethostbyname
send
socket
htons
inet_addr
ioctlsocket
connect
select
closesocket
WSAStartup
WSACleanup
inet_ntoa
mpr
WNetAddConnection2A
WNetCancelConnection2A
netapi32
NetApiBufferFree
NetUserEnum
NetScheduleJobAdd
NetRemoteTOD
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE