Static task
static1
Behavioral task
behavioral1
Sample
147744e9f599a91f6035f5e693c750ae_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
147744e9f599a91f6035f5e693c750ae_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
147744e9f599a91f6035f5e693c750ae_JaffaCakes118
-
Size
75KB
-
MD5
147744e9f599a91f6035f5e693c750ae
-
SHA1
82fc05403b893b7fcc1f36bc9fc4e8ac4d5ffca0
-
SHA256
45472e6ae43286ebd8429afebbb12b0892c6578ad26a79f3f1a988b6906d1780
-
SHA512
0da64576cac6b5bb11a3ef52a5ffd273ff526940d56a10ea8abce45863b5fde4abcf47d947cd7ee0c397c69b9dc93c8180957b7d08fb2bb65c5efa6a31cd9daf
-
SSDEEP
1536:p1p+bQM1HppEhPbCoEDAQhdolEOC4Cs0TT2YynXZstDzQ:ynfEhPmoEDATm4dGYJslzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 147744e9f599a91f6035f5e693c750ae_JaffaCakes118
Files
-
147744e9f599a91f6035f5e693c750ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
669a7d2fbabb24d81bb0461211decbe2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetModuleFileNameA
GetFileSize
lstrcpyA
SetFilePointer
ReadFile
CloseHandle
lstrcatA
WriteFile
GetSystemDirectoryA
MoveFileExA
SystemTimeToFileTime
SetFileTime
CopyFileA
LoadLibraryA
GetProcAddress
Sleep
lstrlenA
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapAlloc
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
IsBadCodePtr
GetLocaleInfoA
VirtualProtect
GetSystemInfo
advapi32
OpenServiceA
ControlService
QueryServiceStatus
ChangeServiceConfigA
CreateServiceA
ChangeServiceConfig2A
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
StartServiceA
CloseServiceHandle
OpenSCManagerA
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE