Static task
static1
Behavioral task
behavioral1
Sample
00c095a507a3ba12a07610878d883fb6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00c095a507a3ba12a07610878d883fb6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
00c095a507a3ba12a07610878d883fb6_JaffaCakes118
-
Size
225KB
-
MD5
00c095a507a3ba12a07610878d883fb6
-
SHA1
3a5153ce8381e7ee694fbb0eee408ee08b1b24fa
-
SHA256
a60c4107d0afaed1aedc3dec444ea502aa35513f999cb2735baa2cdae3dcf4c0
-
SHA512
b410ecc1163dde80a8e65451b8cc2c3e63556f6c3b9c43e8fe09843103a90539b739001bbb4b88a12263901aeab833fc77e4559bb27f50bba23d2891213032f0
-
SSDEEP
6144:plqjic3f5c4CCVNmdWPCOkBqL6A6HZCwbsnJhV:psjicv5c4COQdWABaG5IhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00c095a507a3ba12a07610878d883fb6_JaffaCakes118
Files
-
00c095a507a3ba12a07610878d883fb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b2c5017162cf4c90f864276a7932af1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateDirectoryExA
EnumSystemCodePagesA
ExitProcess
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
GetProfileSectionW
GetThreadSelectorEntry
GetTickCount
SetComputerNameA
SetDefaultCommConfigW
SetProcessPriorityBoost
advapi32
CryptEnumProviderTypesA
CryptEnumProvidersW
DeleteService
EnumDependentServicesA
GetCurrentHwProfileW
GetNamedSecurityInfoExA
GetSecurityInfoExW
GetServiceKeyNameW
InitializeSid
LookupPrivilegeDisplayNameA
RegisterServiceCtrlHandlerA
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherA
user32
AppendMenuW
ChangeDisplaySettingsW
ChildWindowFromPointEx
DdeQueryStringW
IsCharAlphaA
IsWindowEnabled
KillTimer
RegisterClassExA
SetDlgItemTextW
UnlockWindowStation
UnregisterDeviceNotification
VkKeyScanW
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 222KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ