Static task
static1
Behavioral task
behavioral1
Sample
095ce14af8b9eea36aa00235764a5c6f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
095ce14af8b9eea36aa00235764a5c6f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
095ce14af8b9eea36aa00235764a5c6f_JaffaCakes118
-
Size
296KB
-
MD5
095ce14af8b9eea36aa00235764a5c6f
-
SHA1
5203d35464decd4bef2fdf80c5f7ba7ebedfbb8a
-
SHA256
6f31c08f8400fa7b462588fb6cbe5d0b975bd82f82d229279078f1fb23a954e3
-
SHA512
944da047e380f7a8fc10fc0c9170addad559b6dfcf625ae54d06be1d3f15b519a231f1156c0e12e11dcae615e91af4354016ed4f02d8cb3f65fe1cb785a8ced7
-
SSDEEP
1536:v6Rmky9s6LL9wbNFsp9gqv1NFlYe4fSerm6jFpR0TB8qJtW1lNroJyiKdojGtBpr:Q6LL9wBavFlgjFp+ymWr+1Kdoep9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 095ce14af8b9eea36aa00235764a5c6f_JaffaCakes118
Files
-
095ce14af8b9eea36aa00235764a5c6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7898354a03d042a53bc46cdacac785b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
GetComputerNameA
GetWindowsDirectoryA
CompareStringW
CompareStringA
LCMapStringW
WinExec
Sleep
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
CreateEventA
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetConsoleCtrlHandler
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
SetEndOfFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
SetEnvironmentVariableA
user32
ShowWindow
FindWindowA
advapi32
OpenSCManagerA
OpenServiceA
CloseServiceHandle
CreateServiceA
StartServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
Sections
.text Size: 184KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.lrdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE