Static task
static1
Behavioral task
behavioral1
Sample
7cafb78dafb1678d53d93926f47d6262_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7cafb78dafb1678d53d93926f47d6262_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7cafb78dafb1678d53d93926f47d6262_JaffaCakes118
-
Size
277KB
-
MD5
7cafb78dafb1678d53d93926f47d6262
-
SHA1
27228123eb2d87c618b5a5a87fb0864364513744
-
SHA256
ef85af80d526aae724d4d6ad6dd7012ad0178ea0a8f941ae3a2f741c55fcf3ae
-
SHA512
8d1c2a3dcd513d8ffa8fed5d4fe0a79fbbdeba1a5673078b0c664de7c1a9bd417f04e6197f477055385e30350fe1dfb04f7c7ef99856de1121cac92c7809f704
-
SSDEEP
6144:gOdO7xz+INda6CLjucaeMmiQHy/2P04y+nenKLAw1:gOdOdSINfC3daQS/2PhRnkY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7cafb78dafb1678d53d93926f47d6262_JaffaCakes118
Files
-
7cafb78dafb1678d53d93926f47d6262_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c6e22be4f69fd9e810de853b070d0ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
inet_addr
gethostname
gethostbyname
iphlpapi
GetBestInterface
GetIpAddrTable
kernel32
GetProcessHeap
TlsAlloc
WaitForSingleObject
lstrcpyW
lstrlenW
CreateEventW
CreateMutexW
FreeLibrary
GlobalAlloc
ExpandEnvironmentStringsW
GetModuleHandleW
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
IsValidLocale
GetVersion
GetProcAddress
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
cryptui
CryptUIDlgSelectCA
CryptUIDlgViewContext
CryptUIFreeViewSignaturesPagesA
CryptUIWizQueryCertRequestNoDS
CryptUIGetCertificatePropertiesPagesW
CryptUIDlgSelectStoreW
kbdhela3
KbdLayerDescriptor
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lnZ Size: 2KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bZ Size: 4KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SzmrHn Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.FzrL Size: 2KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.EsJW Size: 1KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dam Size: 2KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jIwa Size: 140KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Q Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dAwL Size: 2KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e Size: 1KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QKHjVx Size: 3KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zLxRkc Size: 74KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ