Static task
static1
Behavioral task
behavioral1
Sample
06d6779dec08194cb910ae343070df9b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06d6779dec08194cb910ae343070df9b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06d6779dec08194cb910ae343070df9b_JaffaCakes118
-
Size
349KB
-
MD5
06d6779dec08194cb910ae343070df9b
-
SHA1
0910867994485317118dd46c7b1d23140c170a34
-
SHA256
309d48e866f14fab470c93db57d7334bd271df8482c5bf0c8ffbe9e468d739cc
-
SHA512
e07b44ee16947bc56ac8ead131522a8de8a6c87d4e028eecefd7c3459563c6bf1483a961af677e612d7ce6f68b25939c4ea9e37c2ba5906c5a23f234c39aead7
-
SSDEEP
6144:jUf+krSCXJxm5aVLVhgcvpjAnqye7m8ITESWzJNhwTk:jUWkrMEVHpjAn0sKwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06d6779dec08194cb910ae343070df9b_JaffaCakes118
Files
-
06d6779dec08194cb910ae343070df9b_JaffaCakes118.exe windows:5 windows x86 arch:x86
26653c129d17b4575eb55fa65aa027e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atol
_wcsicmp
wcslen
_stricmp
_adjust_fdiv
malloc
_initterm
free
wcscpy
_except_handler3
memmove
_getpid
strstr
ntdll
RtlConvertSidToUnicodeString
advapi32
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegDeleteValueA
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
CloseServiceHandle
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCreateKeyExA
kernel32
lstrcpynW
GetVersionExW
LoadLibraryW
FreeLibrary
DisableThreadLibraryCalls
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetCurrentProcessId
LocalFree
LocalAlloc
CloseHandle
WaitForSingleObject
CreateEventA
ReleaseMutex
DuplicateHandle
GetCurrentProcess
OpenMutexA
GlobalFree
GetComputerNameW
GetModuleHandleA
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemDirectoryW
lstrcmpiW
GlobalAlloc
GetCommandLineA
MultiByteToWideChar
lstrcpyW
lstrlenW
WideCharToMultiByte
rpcrt4
RpcStringFreeW
RpcBindingFromStringBindingW
RpcBindingFree
I_RpcMapWin32Status
RpcStringBindingComposeW
RpcMgmtInqServerPrincNameW
NdrClientCall2
RpcBindingSetAuthInfoW
ws2_32
WSALookupServiceBeginW
WSALookupServiceNextW
WSALookupServiceEnd
user32
CharPrevW
CharNextW
wsprintfW
netapi32
DsRoleFreeMemory
DsRoleGetPrimaryDomainInformation
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 231KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 33KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ