Static task
static1
Behavioral task
behavioral1
Sample
ed6a86646063d380fa30c1f56088a0d5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ed6a86646063d380fa30c1f56088a0d5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed6a86646063d380fa30c1f56088a0d5_JaffaCakes118
-
Size
140KB
-
MD5
ed6a86646063d380fa30c1f56088a0d5
-
SHA1
dc80960861002dd7a2ee69679bfd59412788634d
-
SHA256
abe71e5736582299dc7d09e2f6a007d813cfb190b267bdb1e7912804ecd9545d
-
SHA512
109ddc3563ed40eb3e34cf1ad0d29f820d21900f0c5124f83728a5ff02f31202dbfcdde31f8b98712c7e96481e02b6ac6d01f978f5a07c4a1c7780bacf0c413c
-
SSDEEP
3072:/Vwieg8N9Jd/KLq4ugB78Daj76bLzeGl:/Vwieg8oqEaDsW7l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed6a86646063d380fa30c1f56088a0d5_JaffaCakes118
Files
-
ed6a86646063d380fa30c1f56088a0d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbaf4ce434d5f47e1c5d6e13a52d954c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
OpenProcess
DuplicateHandle
GetCurrentProcess
WriteFile
GetLastError
SetFileTime
GetFileAttributesExA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
GetVersionExA
GetModuleFileNameA
GetSystemDirectoryA
WinExec
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateFileA
user32
GetDesktopWindow
DispatchMessageA
CreateWindowExA
RegisterClassExA
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
ShowWindow
advapi32
GetUserNameA
DeleteService
CreateServiceA
OpenSCManagerA
CloseServiceHandle
StartServiceA
ConvertSidToStringSidA
LookupAccountNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
OpenServiceA
shlwapi
SHDeleteKeyA
StrStrA
SHSetValueA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
msvcrt
srand
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
sprintf
strstr
_access
fclose
fflush
fwrite
fopen
rand
_except_handler3
_strlwr
time
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ