Static task
static1
Behavioral task
behavioral1
Sample
17044a5db92904181372e588a21c6db9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17044a5db92904181372e588a21c6db9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17044a5db92904181372e588a21c6db9_JaffaCakes118
-
Size
20KB
-
MD5
17044a5db92904181372e588a21c6db9
-
SHA1
5f1e30209bc5b16fdac7d93bcd051e6e454061fb
-
SHA256
1508df16cde35f5ce5d86695aec07584fd61989bbf5a72dc261b9593020c1ae4
-
SHA512
7a54cfa985065316014f5763c9f6c79062e8746a9237d1018cfc9332d82d324e06d633d30e5759ddf71df6f639164a273b203ba0e0ba3bb63b35767cace248f7
-
SSDEEP
384:uQJfT3GfxEQwS5E3JMS1tEPNZEkhsFjsFwN4MiHg0Fw1:74xEY0JB1tElZEXaFhH1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17044a5db92904181372e588a21c6db9_JaffaCakes118
Files
-
17044a5db92904181372e588a21c6db9_JaffaCakes118.exe windows:4 windows x86 arch:x86
9eb9522f19802fff807fc48b2a9f42c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord825
ord2827
ord941
ord665
ord1979
ord5186
ord354
ord6385
ord939
ord2820
ord3811
ord2614
ord860
ord2818
ord535
ord537
ord540
ord858
ord800
msvcrt
__CxxFrameHandler
sprintf
printf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_onexit
__dllonexit
_except_handler3
strrchr
kernel32
GetSystemDirectoryA
GetPrivateProfileStringA
GetCurrentThreadId
GetCurrentProcessId
Process32First
Process32Next
MultiByteToWideChar
GetModuleFileNameA
GetVersionExA
FreeLibrary
CreateToolhelp32Snapshot
lstrcmpiA
GetCurrentProcess
CloseHandle
OpenProcess
GetProcAddress
LoadLibraryA
GetLastError
user32
DispatchMessageA
PostQuitMessage
PostThreadMessageA
TranslateMessage
KillTimer
GetMessageA
SetTimer
advapi32
QueryServiceStatus
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CreateProcessAsUserA
CreateProcessAsUserW
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterServiceCtrlHandlerExA
CreateServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
DeleteService
ControlService
StartServiceCtrlDispatcherA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegFlushKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
shell32
ShellExecuteA
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE