Static task
static1
Behavioral task
behavioral1
Sample
432d668bcb8d9f4042d31e9a737c133a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
432d668bcb8d9f4042d31e9a737c133a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
432d668bcb8d9f4042d31e9a737c133a_JaffaCakes118
-
Size
54KB
-
MD5
432d668bcb8d9f4042d31e9a737c133a
-
SHA1
b682b7daead2e052c587440a7fd7be34b76ee4e1
-
SHA256
828461dc342ca64e35faa8eb2dbc116e4d4fce18dd1c9fd80da67f3e50914a2e
-
SHA512
ce2d88602fa9da1e4ba08e9d47fa264fc26452325916b0bf5ab6260b6e9881076d90d9ce231a947a8f41858d8f5919eda58943c52c5fbfee91ba5d20b2727ee1
-
SSDEEP
192:WB+KWZTsj2biHAJvL1+HWIUlI9rPJtgNukUJY+EkBLmnqi87P1oynYJDrB2oCSub:lTiTHAVIOlQENuk+EkBLaqie1SJDQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 432d668bcb8d9f4042d31e9a737c133a_JaffaCakes118
Files
-
432d668bcb8d9f4042d31e9a737c133a_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
a413c8b2ccf24fdf935b997a4ba49afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
SizeofResource
FindResourceA
LoadLibraryA
GetProcAddress
CloseHandle
WriteFile
CreateFileA
ReadFile
GetFileSize
DeleteFileA
SetFilePointer
MoveFileA
GlobalFree
CopyFileA
CreateProcessA
GetCommandLineA
GetStartupInfoA
FindClose
GetLastError
FindNextFileA
Sleep
FreeLibrary
lstrcpyA
lstrcatA
GetSystemDirectoryA
TerminateProcess
ResumeThread
SetThreadContext
GetModuleHandleA
lstrcmpiA
GetModuleFileNameA
GetThreadContext
GetTickCount
SetFileAttributesA
CreateDirectoryA
CreateThread
GetDriveTypeA
GetLogicalDriveStringsA
ExitThread
GetDiskFreeSpaceExA
CreateMutexA
ExitProcess
GetTempPathA
GetCurrentThreadId
BeginUpdateResourceA
UpdateResourceA
FindFirstFileA
EndUpdateResourceA
user32
GetInputState
PostThreadMessageA
DestroyIcon
GetMessageA
msvcrt
_stricmp
free
malloc
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
atoi
strtok
sprintf
realloc
printf
rename
fopen
rand
srand
time
strchr
fclose
fwrite
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_access
advapi32
ChangeServiceConfig2A
CloseServiceHandle
ChangeServiceConfigA
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ