Static task
static1
Behavioral task
behavioral1
Sample
f7e78eae85b916fa4cf41893b0dc943c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f7e78eae85b916fa4cf41893b0dc943c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f7e78eae85b916fa4cf41893b0dc943c_JaffaCakes118
-
Size
79KB
-
MD5
f7e78eae85b916fa4cf41893b0dc943c
-
SHA1
b477ae3d14a1cf6b216f3bc0b1b085515a3cc0e1
-
SHA256
ac44870cab99bbf9ffa7230d6092d4698c7795a29caed618f0edc9f57accfc23
-
SHA512
34d3574cac544f7b1a2eaa1e816688cdee605cb7f36a9bc698441127c7a16d2b08294b2155d33d37817d4668f0665ab07cb6e82823d0b9e80dfa0d72f714942b
-
SSDEEP
1536:knxGWIjYiW/nQUT+tJmy8xkUIilC3RkRQ43/+mp:kxnniW/nxy8qUIilCwQ43/+mp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7e78eae85b916fa4cf41893b0dc943c_JaffaCakes118
Files
-
f7e78eae85b916fa4cf41893b0dc943c_JaffaCakes118.exe windows:5 windows x86 arch:x86
707d5f160709e60ff691f0eb346501ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
GetCurrentThreadId
GetCurrentProcess
LoadLibraryA
WriteFile
FlushFileBuffers
SetFilePointer
GetFileAttributesA
CreateDirectoryA
CreateThread
GetComputerNameA
CreateProcessA
GetStartupInfoA
MultiByteToWideChar
WideCharToMultiByte
SetStdHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseMutex
OpenMutexA
CreateMutexA
WaitForMultipleObjects
ResetEvent
SetEvent
WaitForSingleObject
OpenEventA
CreateEventA
UnmapViewOfFile
OpenFileMappingA
CreateFileMappingA
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
CloseHandle
Sleep
GetCurrentProcessId
GetModuleHandleA
GetProcAddress
GetLastError
GetModuleFileNameA
SetCurrentDirectoryA
GetVersionExA
GetEnvironmentVariableA
OutputDebugStringA
GetSystemTimeAsFileTime
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
user32
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
TranslateMessage
SendMessageA
DefWindowProcA
DestroyWindow
PostQuitMessage
advapi32
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ControlService
QueryServiceStatus
StartServiceA
RegOpenKeyExA
RegDeleteValueA
DeleteService
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
CreateServiceA
ChangeServiceConfigA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
GetUserNameA
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ