Static task
static1
Behavioral task
behavioral1
Sample
050960a15345fb06e1583f0f2a21bc35_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
050960a15345fb06e1583f0f2a21bc35_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
050960a15345fb06e1583f0f2a21bc35_JaffaCakes118
-
Size
136KB
-
MD5
050960a15345fb06e1583f0f2a21bc35
-
SHA1
c753da961c4ced402fcf108c126e5e6f58f9d180
-
SHA256
d85709ee51eb1f40d6c5d3345fc82889247e0540111caadd5f33c853a3ed3401
-
SHA512
819df0b070c6608a77f30297332c5d1bcd203b9bb70c0c28dd352771923b223d6b78ebae595a584434045934d484592106efc921bbb805c0825481e8879835b0
-
SSDEEP
3072:l7B3qL9sJteQrEI62olEVIlh3AViy3333333333333333333333333333333333Y:76upAv24En02QR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050960a15345fb06e1583f0f2a21bc35_JaffaCakes118
Files
-
050960a15345fb06e1583f0f2a21bc35_JaffaCakes118.exe windows:4 windows x86 arch:x86
e50dd7b0694d899d805ba622e9818ffb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
DuplicateHandle
OpenProcess
WriteFile
WinExec
SetFileTime
GetFileAttributesExA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
CloseHandle
CreateFileA
LoadLibraryA
GetProcAddress
GetLastError
GetSystemDirectoryA
GetCurrentProcess
user32
PostQuitMessage
ShowWindow
GetMessageA
DefWindowProcA
CreateWindowExA
TranslateMessage
RegisterClassExA
DispatchMessageA
GetDesktopWindow
advapi32
CreateServiceA
RegCloseKey
GetUserNameA
LookupAccountNameA
ConvertSidToStringSidA
RegOpenKeyExA
CloseServiceHandle
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
RegQueryValueExA
msvcrt
__getmainargs
_strlwr
_controlfp
__set_app_type
__p__fmode
fclose
fflush
fwrite
fopen
sprintf
??3@YAXPAX@Z
rand
??2@YAPAXI@Z
_except_handler3
strstr
_access
srand
time
_exit
_XcptFilter
exit
_acmdln
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHSetValueA
StrStrA
SHDeleteKeyA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ