Static task
static1
Behavioral task
behavioral1
Sample
101e84abb0e9fc7a0e7607dd364dd88c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
101e84abb0e9fc7a0e7607dd364dd88c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
101e84abb0e9fc7a0e7607dd364dd88c_JaffaCakes118
-
Size
128KB
-
MD5
101e84abb0e9fc7a0e7607dd364dd88c
-
SHA1
3d8b414aed6c6b65e663f8639df536cf568f5cae
-
SHA256
7c2abc71b9e1a76b81c486c82e02e09a9e120d8994fec8d312edb0539f55d8ce
-
SHA512
325fd6aaae55b4d081802bf0532110322472a8f6598c9ae3a781cb39e089f46f25008dbdb76098ae6127e143ecddd9ec53e92e683d98bc30040de74271795e40
-
SSDEEP
1536:7rA9EH+eHvdPvPJ1q7uAmFellw4YSonpQwlmUjGMPlKayjZh/7NtoHc:vA9EH+iPvPJk7vHW4yQQzsaAZXtWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101e84abb0e9fc7a0e7607dd364dd88c_JaffaCakes118
Files
-
101e84abb0e9fc7a0e7607dd364dd88c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5321a5fe48df9791c82d8297ae38f2e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GetLastError
WinExec
GetModuleFileNameA
SetFileTime
GetFileAttributesExA
GetStartupInfoA
GetModuleHandleA
Sleep
GetSystemDirectoryA
CreateFileA
LoadLibraryA
GetProcAddress
CloseHandle
GlobalAlloc
user32
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
ShowWindow
CreateWindowExA
RegisterClassExA
DispatchMessageA
GetDesktopWindow
advapi32
ConvertSidToStringSidA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
StartServiceA
OpenServiceA
CreateServiceA
DeleteService
LookupAccountNameA
GetUserNameA
OpenSCManagerA
shlwapi
SHDeleteKeyA
SHSetValueA
StrStrA
msvcrt
_exit
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
sprintf
_access
rand
srand
time
fclose
fflush
fwrite
fopen
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ