Static task
static1
Behavioral task
behavioral1
Sample
3d4a4bc78ea41b514398f27c2cd475a7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d4a4bc78ea41b514398f27c2cd475a7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d4a4bc78ea41b514398f27c2cd475a7_JaffaCakes118
-
Size
118KB
-
MD5
3d4a4bc78ea41b514398f27c2cd475a7
-
SHA1
c2df1e494c3b6425452b08ca4883c673ab19370b
-
SHA256
48134edbe0d49184c69891ef7368fceb714375a285a1673355251d79a9a9ddba
-
SHA512
f35fc66800872ec7890f649cecfa6b17f7498fbdbb25c5b4ba09973c0b966ef6a3f0b2685f32cb2cd510241cce3fce1161310cfdcd431bedd1f0e0c7605a0fd4
-
SSDEEP
1536:HaF5dv0NCjK3j2zjDMALQh3WXaVJ5pj1Zt8n2h0+6kVdbRPEpg8u62eUEIUnz:6FkI8jeU8FXaBB1Zt1QkV9NEpFWe2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d4a4bc78ea41b514398f27c2cd475a7_JaffaCakes118
Files
-
3d4a4bc78ea41b514398f27c2cd475a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad008fa22556e7fcc9140bce73859dcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetEnvironmentVariableA
ResetEvent
FindFirstChangeNotificationA
DeleteFileA
OpenMutexA
CreateMutexA
ReleaseMutex
GetLocalTime
CreateFileA
HeapFree
HeapAlloc
SetTapePosition
VirtualProtect
LoadResource
FindResourceA
LCMapStringA
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetFilePointer
GetCurrentProcess
TerminateProcess
LCMapStringW
WriteFile
CloseHandle
GetLastError
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
user32
SetWindowTextA
TranslateMessage
LoadCursorA
UnregisterHotKey
CreateMenu
DeferWindowPos
BeginDeferWindowPos
ValidateRect
PostMessageA
InvalidateRect
OpenClipboard
BeginPaint
IsDialogMessageA
LoadBitmapA
CheckDlgButton
SendMessageTimeoutA
RegisterWindowMessageA
GetIconInfo
MapWindowPoints
GetSystemMetrics
DestroyMenu
ws2_32
WSACreateEvent
WSAAddressToStringA
WSAConnect
WSACloseEvent
getpeername
getsockname
socket
shutdown
setsockopt
sendto
gethostbyname
htons
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 982KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ