Static task
static1
Behavioral task
behavioral1
Sample
0e6c10b2c528356ea48c70ade0538d47_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e6c10b2c528356ea48c70ade0538d47_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e6c10b2c528356ea48c70ade0538d47_JaffaCakes118
-
Size
192KB
-
MD5
0e6c10b2c528356ea48c70ade0538d47
-
SHA1
a4984e7891a78adcb7ce2153729b1f6fb46caa38
-
SHA256
08a34798711199942b74a6e2a830a3cd1993cd4866ccd738471d30a44033be84
-
SHA512
6038012364405f027b65e5ad1d60a05542b443ec1cccc0cf19a263f8eb166c675afe032506ae3e0f30aed3d6555cdd7bee9ee3322797d800a664de695b273873
-
SSDEEP
3072:jhzr7GpmwWAlWYEIL2CFujl7MnyIRrhO9ebuhe/FFLGE0ve2:tLGpm8EIL2Ccjhu3hshMrLz0v5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e6c10b2c528356ea48c70ade0538d47_JaffaCakes118
Files
-
0e6c10b2c528356ea48c70ade0538d47_JaffaCakes118.exe windows:4 windows x86 arch:x86
bfd2588b5a8f2dedb8a6c1d03d21ed6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidToStringA
shlwapi
SHEnumValueA
StrStrIA
SHGetValueA
SHSetValueA
SHEnumKeyExA
shell32
SHGetSpecialFolderPathA
user32
wsprintfA
advapi32
CryptGenRandom
OpenServiceA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
OpenSCManagerA
DeleteService
CloseServiceHandle
CreateServiceA
StartServiceA
ole32
CoCreateInstance
CoInitialize
CoCreateGuid
msvcrt
rand
isgraph
??2@YAPAXI@Z
isalnum
fclose
fopen
strlen
sprintf
ispunct
strerror
isxdigit
tolower
isspace
printf
wctomb
__mb_cur_max
isalpha
islower
atoi
strncpy
wcscpy
mbstowcs
srand
isupper
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
strcat
time
memset
malloc
memcpy
memcmp
free
fwrite
imagehlp
ImageNtHeader
kernel32
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
GetModuleHandleA
lstrlenA
GetLastError
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
GetStartupInfoA
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE