Static task
static1
Behavioral task
behavioral1
Sample
045038ef39667a93cc2a033aafb97df0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
045038ef39667a93cc2a033aafb97df0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
045038ef39667a93cc2a033aafb97df0_JaffaCakes118
-
Size
144KB
-
MD5
045038ef39667a93cc2a033aafb97df0
-
SHA1
1d5f72afceb618bcf75c9f0d7faebaed7f033ce6
-
SHA256
99ba939b1ec73319aeafc5874fee5c81d867d7424422d8124dc738480fe7ec96
-
SHA512
d624aa460de1787af94652210102311eecf82b0da1cf6ddd614a04aa529b233a73c82d30156b49059b8c0f6d18041bb5d8bf48e09b2fb614c29717b00eb7491d
-
SSDEEP
3072:8O3sCKfJzJ8W2CP5koA1bhBv9Yfda8Kd1RIBKFU:8OJChkocbKFFKd1WH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 045038ef39667a93cc2a033aafb97df0_JaffaCakes118
Files
-
045038ef39667a93cc2a033aafb97df0_JaffaCakes118.exe windows:4 windows x86 arch:x86
34e451df4e44e7d02b6f685bd365e811
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
GetCurrentProcess
OpenProcess
WriteFile
CreateFileA
GetProcAddress
GlobalAlloc
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
CloseHandle
GetVersionExA
Sleep
WinExec
GetLastError
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
LoadLibraryA
user32
RegisterClassExA
ShowWindow
CreateWindowExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
advapi32
CreateServiceA
LookupAccountNameA
ConvertSidToStringSidA
OpenSCManagerA
CloseServiceHandle
DeleteService
OpenServiceA
StartServiceA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
shlwapi
SHDeleteKeyA
StrStrA
SHSetValueA
msvcrt
_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
srand
time
_access
sprintf
??3@YAXPAX@Z
rand
??2@YAPAXI@Z
strstr
fclose
fflush
fwrite
fopen
_except_handler3
_strlwr
_XcptFilter
exit
_acmdln
__getmainargs
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ