Static task
static1
Behavioral task
behavioral1
Sample
04bb4658a27572c56f3ab4ff2a8a74fd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04bb4658a27572c56f3ab4ff2a8a74fd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04bb4658a27572c56f3ab4ff2a8a74fd_JaffaCakes118
-
Size
36KB
-
MD5
04bb4658a27572c56f3ab4ff2a8a74fd
-
SHA1
6380bdf25587d2269ba099e7457e5f9e80fd8e0c
-
SHA256
0bf1ab2d0ea6c6e9c440e900b813789b4a16980b6f778787eeb980a5a2e809e8
-
SHA512
b1260178edfed654f13ccf555fa0137b26b2bee8487e588dcc30dfe673761e708aba764360ece1fd9868923bf871e61febf97a15e9bb77b51991b234259879e0
-
SSDEEP
384:GYj8IgqYYwLcN6M43ys/mlb6+vyyRl+yZorh6ob4+05P7fdW622yPA:Gg8IgqYYwLcNBsmy6jZuh6obaP7FX22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04bb4658a27572c56f3ab4ff2a8a74fd_JaffaCakes118
Files
-
04bb4658a27572c56f3ab4ff2a8a74fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
eceedeb5ee76cec4183a65369ad18ee3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetVersionExA
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetLastError
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
VirtualAlloc
HeapAlloc
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
user32
MessageBoxA
advapi32
RegCloseKey
RegSetValueExA
OpenServiceA
ControlService
OpenSCManagerA
RegCreateKeyA
ChangeServiceConfigA
RegQueryValueExA
RegOpenKeyA
QueryServiceStatus
CloseServiceHandle
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ