Static task
static1
Behavioral task
behavioral1
Sample
07cb27e50b6bf82340bf6f7b112e2415_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07cb27e50b6bf82340bf6f7b112e2415_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07cb27e50b6bf82340bf6f7b112e2415_JaffaCakes118
-
Size
44KB
-
MD5
07cb27e50b6bf82340bf6f7b112e2415
-
SHA1
708d02316286c4469d41bb792d4ed3e04307b8d3
-
SHA256
f0ff2cfa425271d273fd8087bf45765d029f55587e1caaf188b460d10d0db6c5
-
SHA512
b004feec156a98cddd0d0d4bae725eabbeee4f4b076234b1e64be0c58a814f65fcb3dea7687c58006a176929e6a8a19437374a28484ecfbd08af050d89e4df9f
-
SSDEEP
768:x5aITkBXkVH7cfXjsFTkwcYvvknsK61271bR:WITkBXkH78XIi/YvysTobR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cb27e50b6bf82340bf6f7b112e2415_JaffaCakes118
Files
-
07cb27e50b6bf82340bf6f7b112e2415_JaffaCakes118.exe windows:5 windows x86 arch:x86
c2dd4ad0eb86cc944e7c652fd745395d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_controlfp
__set_app_type
strchr
_exit
_acmdln
_XcptFilter
exit
__setusermatherr
__getmainargs
_initterm
__p__fmode
_adjust_fdiv
__p__commode
_except_handler3
sprintf
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
kernel32
GetProfileStringA
GetCurrentDirectoryA
GetSystemInfo
lstrcmpA
WriteProfileStringA
GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA
DeleteFileA
GetVersionExA
GetShortPathNameA
SetLastError
GetPrivateProfileStringA
lstrcatA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileAttributesA
GetSystemDirectoryA
CompareStringA
lstrcpyA
ExpandEnvironmentStringsA
GetTempFileNameA
GetCommandLineA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
WritePrivateProfileStringA
lstrcmpiA
user32
GetDesktopWindow
LoadStringA
shell32
SHGetMalloc
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoUninitialize
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ