Static task
static1
Behavioral task
behavioral1
Sample
16c6042426fc1e5d63ec2c5b7db7fd29_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16c6042426fc1e5d63ec2c5b7db7fd29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16c6042426fc1e5d63ec2c5b7db7fd29_JaffaCakes118
-
Size
136KB
-
MD5
16c6042426fc1e5d63ec2c5b7db7fd29
-
SHA1
14c414ab66038b8a9508aa98bbcb5adbc851971c
-
SHA256
f7df9802e2fb4882af878755b4974975b20ff94ebf7113189085f75fc72065c1
-
SHA512
fae3a09a2e02d582efc10b9bd5b7a5b082fedce742f29ca928e05df44ab6504144faf14cc77c68580eed7b522f53b6ef31aac2030874a54a868650ae6e59bcbf
-
SSDEEP
3072:JoEAV3fKWJwH13QNFnw41ZMxv73ymmbjEsJy:RM3UH1gNyICjKEsA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c6042426fc1e5d63ec2c5b7db7fd29_JaffaCakes118
Files
-
16c6042426fc1e5d63ec2c5b7db7fd29_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad6a309ea5a5daf177d4cfee3d273e8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExA
GetLastError
GetProcAddress
LoadLibraryA
GlobalFree
SetFileTime
GetFileAttributesExA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
WinExec
CreateFileA
Sleep
WriteFile
OpenProcess
GetCurrentProcess
DuplicateHandle
CloseHandle
GetSystemDirectoryA
user32
RegisterClassExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
DefWindowProcA
PostQuitMessage
advapi32
ConvertSidToStringSidA
RegCloseKey
CreateServiceA
OpenSCManagerA
CloseServiceHandle
RegOpenKeyExA
DeleteService
OpenServiceA
LookupAccountNameA
GetUserNameA
StartServiceA
RegQueryValueExA
shlwapi
StrStrA
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_access
rand
sprintf
strstr
srand
time
fclose
fflush
fwrite
fopen
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ