Static task
static1
Behavioral task
behavioral1
Sample
23ef594aae047374ff77393088a54737_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23ef594aae047374ff77393088a54737_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23ef594aae047374ff77393088a54737_JaffaCakes118
-
Size
105KB
-
MD5
23ef594aae047374ff77393088a54737
-
SHA1
a9cb6fac65d082c8b5c62e6b6d875012c6cfe0d5
-
SHA256
ed1776ff0aea84449c2bb181dde45b794866075a5cc6e059d14610e4129a7214
-
SHA512
32bef6c748f020c850d50cfe08e06f0661a10eabca0620c0075176ad364430da6b219630aba56e37134e906aa7230cdd62db3af9c9567d84233660f60865267d
-
SSDEEP
1536:9qSURNt0RZx+9uAA0NCwppDfNkrissAMLWtI5weBTf:9GNM8kB0NCwph7LWO5NBTf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ef594aae047374ff77393088a54737_JaffaCakes118
Files
-
23ef594aae047374ff77393088a54737_JaffaCakes118.exe windows:5 windows x86 arch:x86
84f2ccbb7e3302b64727a453b8eb7890
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetModuleHandleA
WriteFile
CreateFileA
GetTickCount
GetVersionExA
TerminateProcess
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenEventA
SetEvent
DeleteFileA
CopyFileA
GetLastError
OutputDebugStringA
OpenProcess
LoadLibraryA
GetProcAddress
GetCurrentProcess
WriteProcessMemory
GetSystemDirectoryA
GetWindowsDirectoryA
MoveFileExA
CreateThread
CloseHandle
Sleep
CreateProcessA
lstrlenA
GetModuleFileNameA
SetStdHandle
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
GetConsoleMode
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer
GetConsoleCP
user32
FindWindowA
PostMessageA
advapi32
AdjustTokenPrivileges
ControlService
StartServiceA
CreateProcessAsUserA
OpenProcessToken
RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
GetUserNameA
QueryServiceConfigA
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
SetServiceStatus
RegOpenKeyExA
RegSetValueExA
RegCloseKey
LookupPrivilegeValueA
shlwapi
PathFileExistsA
wininet
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetConnectA
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ