Static task
static1
Behavioral task
behavioral1
Sample
1c1dcb656969a723d370414f71de0e88_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c1dcb656969a723d370414f71de0e88_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c1dcb656969a723d370414f71de0e88_JaffaCakes118
-
Size
19KB
-
MD5
1c1dcb656969a723d370414f71de0e88
-
SHA1
92a60a8ff37176b258beb0cbbaab23e5c598e3fc
-
SHA256
ec66cfdb02b9f3c5b6564aee09219ccbd226ae804f87057dbe401ba430621db7
-
SHA512
b78361ff6bdb7eaab0b666780c3af9655c07b125bb7ac2ba1a8fa692759cee51142671fa5472d066fa61c4e8a1521b8e9b7e5a2a5fe53617e42cfb310c924a04
-
SSDEEP
384:6LCfKzc8xkiCjAQhWWt133l0ylvpfj3FMV081V3Em:6uf0k3AQpTzVh1B81qm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c1dcb656969a723d370414f71de0e88_JaffaCakes118
Files
-
1c1dcb656969a723d370414f71de0e88_JaffaCakes118.exe windows:4 windows x86 arch:x86
8584a18c10775d559fe25e98cf82cda7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrcpyA
ReadFile
SetFilePointer
GetFileSize
GetVersionExA
CreateFileA
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetCurrentProcess
LoadLibraryA
CloseHandle
Sleep
MoveFileExA
FindResourceA
SizeofResource
LockResource
WriteFile
GetFileTime
SetFileTime
lstrlenA
FreeResource
GetStartupInfoA
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegFlushKey
RegCloseKey
OpenProcessToken
msvcrt
strlen
memset
malloc
rand
memcpy
sprintf
strcat
free
strncpy
strstr
realloc
??2@YAPAXI@Z
strcmp
atoi
srand
time
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncat
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ