Static task
static1
Behavioral task
behavioral1
Sample
267dad1680ef1d3213d804af1f8d3a8b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
267dad1680ef1d3213d804af1f8d3a8b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
267dad1680ef1d3213d804af1f8d3a8b_JaffaCakes118
-
Size
184KB
-
MD5
267dad1680ef1d3213d804af1f8d3a8b
-
SHA1
2964f6f1232a4583fa08d239bf002f820687a1ca
-
SHA256
5f521034a6b4651c2a67d3413be8976a5a4f2803da06c42250f6e34e1a22be33
-
SHA512
b162801d6360be0db021663bcea0739a5d590ae5edc42b1f9d9d8f3315849e9fe8e9279bcfdfe1d2fd02e1d8cbe9def8ba9f7f7d3ff4d3283cb280d36ccfe7ab
-
SSDEEP
3072:OU0U8lZGGrctPMOgvonf0yhgsK2r8VkrfiiNFQEv27e9s:h8lZGwcSvAnf0agcMkrfF8E27e9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267dad1680ef1d3213d804af1f8d3a8b_JaffaCakes118
Files
-
267dad1680ef1d3213d804af1f8d3a8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
fbd73a19841591d2727514b9cbc54108
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyA
kernel32
SetFileAttributesA
DeleteFileA
GetCommandLineA
SetUnhandledExceptionFilter
OpenEventA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetShortPathNameA
GetFileAttributesA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
GetTickCount
CreateFileA
WriteFile
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
GetStartupInfoA
MoveFileA
GetCurrentDirectoryA
GetTempPathA
GetWindowsDirectoryA
lstrlenA
SetEnvironmentVariableA
CreateDirectoryA
ExitProcess
GetLastError
GetModuleHandleA
Sleep
msvcrt
_strlwr
_strrev
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_itoa
tolower
toupper
srand
rand
malloc
free
strstr
strncpy
__CxxFrameHandler
strcmp
memcpy
strlen
memset
strcpy
strchr
strcat
_except_handler3
_stricmp
_ftol
??3@YAXPAX@Z
user32
wsprintfA
CharNextA
advapi32
GetServiceKeyNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
ChangeServiceConfig2A
CloseServiceHandle
DeleteService
CreateServiceA
OpenSCManagerA
ControlService
StartServiceA
GetServiceDisplayNameA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ