Static task
static1
Behavioral task
behavioral1
Sample
f792ac36e5c0499ecadce2e7aea52296_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f792ac36e5c0499ecadce2e7aea52296_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f792ac36e5c0499ecadce2e7aea52296_JaffaCakes118
-
Size
88KB
-
MD5
f792ac36e5c0499ecadce2e7aea52296
-
SHA1
1155399f74be13675f1e4ba384031d8e44e821e0
-
SHA256
2ac86bb4453aaf0ff428bcc12cdffe4745fed7ca40ed5f8025e7462c524a9f65
-
SHA512
f47c2c8a7eb3e16b9263fbc1923e0554c6ea816251451d183b987c8bd1c2f4c1b7e244a650e53d0aa5f326339ca65a02f05836ffc2c1cfeec4e509c74bc25d10
-
SSDEEP
1536:FA5wAVURLRC3S/yT20Q0zI7AlKITDy3MsSOeBaopWTWTw2:IURLRC3S/yT20bz0olOUaopWTW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f792ac36e5c0499ecadce2e7aea52296_JaffaCakes118
Files
-
f792ac36e5c0499ecadce2e7aea52296_JaffaCakes118.exe windows:4 windows x86 arch:x86
128893975cfa4b457486f56aa152e113
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
SizeofResource
WriteFile
CloseHandle
FindResourceA
LoadResource
FreeResource
SetLastError
HeapFree
lstrcpyA
GetCurrentThreadId
GetPrivateProfileStringA
GetModuleFileNameA
lstrlenA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryA
GetTickCount
Sleep
WritePrivateProfileStringA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
user32
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
advapi32
InitializeAcl
DeleteService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
QueryServiceStatus
GetUserNameA
RegQueryValueExA
CreateServiceA
ControlService
shlwapi
SHDeleteKeyA
netapi32
NetUserGetLocalGroups
NetApiBufferFree
msvcrt
_except_handler3
strchr
srand
rand
memcpy
fopen
memset
strlen
_stricmp
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ