Static task
static1
Behavioral task
behavioral1
Sample
fbd9c47badd1576bdcecc08f19e5a31f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbd9c47badd1576bdcecc08f19e5a31f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbd9c47badd1576bdcecc08f19e5a31f_JaffaCakes118
-
Size
31KB
-
MD5
fbd9c47badd1576bdcecc08f19e5a31f
-
SHA1
f41cb6376d5046aa8b97ec29e67be76285f35983
-
SHA256
eb71b6450035afb9be7ab2ff4fab97ccf5ad7baaf3f6da444c53fb5fc897a36d
-
SHA512
b894c501285b22f154d7a65d41091af14c3d557456cf2515684f064f72e429bf2306692b74fcaf22352d3c19df97efcb1c8c450e4949a20d2a5ce45a1f4e3311
-
SSDEEP
384:yTgqUiNwTjoktcqcKPhg6p3rI7kFxczF0yigByJHvkhoAxNq:yMqUiNwTHbI7kQzF0DgBqkyAx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd9c47badd1576bdcecc08f19e5a31f_JaffaCakes118
Files
-
fbd9c47badd1576bdcecc08f19e5a31f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2f68d3c938f728af02ebb723ab289c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
StartServiceA
kernel32
AddAtomA
CloseHandle
CreateFileA
DeviceIoControl
ExitProcess
FindAtomA
FindResourceA
GetAtomNameA
GetCurrentDirectoryA
GetFileAttributesA
GetLastError
GetModuleFileNameA
LoadResource
LockResource
MultiByteToWideChar
SetUnhandledExceptionFilter
SizeofResource
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_vsnprintf
abort
atexit
atoi
fflush
fprintf
free
malloc
printf
signal
sprintf
strcat
strcmp
strlen
wcslen
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE