Static task
static1
Behavioral task
behavioral1
Sample
06f1b4e849cf9572a87aebf34acdfaed_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06f1b4e849cf9572a87aebf34acdfaed_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06f1b4e849cf9572a87aebf34acdfaed_JaffaCakes118
-
Size
136KB
-
MD5
06f1b4e849cf9572a87aebf34acdfaed
-
SHA1
a6afc3873fa8c2c955e67b3229da8ef16eead4f0
-
SHA256
5ba464d37e2a01d0e5af61337211a05495fc27c5ab03f9aebcc15450b29d75db
-
SHA512
7c2e914202f0a9556d13c10a32c3b80aa5984f39a4a9e5227453bb1a4f5334b5d83d6adcc843db489dab32a27eea3dbc4f743a41eac1772e4ed305711534321d
-
SSDEEP
3072:xc1QsJpGyaqAuXkmHjmDqC/FCqduyYY6jXx+:xc1ZGbeXfHjO1FCMuyL6rx+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f1b4e849cf9572a87aebf34acdfaed_JaffaCakes118
Files
-
06f1b4e849cf9572a87aebf34acdfaed_JaffaCakes118.exe windows:4 windows x86 arch:x86
546f7efeb916fcafa8ea34bae77156fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetVersionExA
GetLastError
WinExec
Sleep
GetModuleFileNameA
SetFileTime
GlobalLock
CreateFileA
DuplicateHandle
GetCurrentProcess
WriteFile
GetStartupInfoA
GetModuleHandleA
GlobalUnlock
GlobalFree
GetSystemDirectoryA
OpenProcess
LoadLibraryA
GetProcAddress
CloseHandle
GetFileAttributesExA
user32
TranslateMessage
GetMessageA
RegisterClassExA
ShowWindow
CreateWindowExA
DefWindowProcA
PostQuitMessage
DispatchMessageA
GetDesktopWindow
advapi32
StartServiceA
OpenSCManagerA
OpenServiceA
DeleteService
CloseServiceHandle
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
CreateServiceA
shlwapi
SHDeleteKeyA
StrStrA
SHSetValueA
msvcrt
_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
sprintf
??3@YAXPAX@Z
rand
??2@YAPAXI@Z
strstr
_access
fclose
fflush
fwrite
fopen
srand
time
_strlwr
_XcptFilter
exit
_acmdln
__getmainargs
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ