Static task
static1
Behavioral task
behavioral1
Sample
256146fb868f4bc481d68d9cd91c17a9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
256146fb868f4bc481d68d9cd91c17a9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
256146fb868f4bc481d68d9cd91c17a9_JaffaCakes118
-
Size
161KB
-
MD5
256146fb868f4bc481d68d9cd91c17a9
-
SHA1
ba44e4cf73cea0633257cb2becec27b19bfa2b1e
-
SHA256
66ed9c16a27aca564eab7eaa51212246501df99c2545116a16fdd3840501d1c7
-
SHA512
06f0de247041e1f7967b14c1c69615c07e9c28e999e27bd74486f54baefbbfd47a3399835a15be177326e400aa6d0215cc7c5390b78971a7aff16cae42f0c4a8
-
SSDEEP
3072:WaaekzcEqtOSfP1UFKl5hWCXqoIBLlP13xwdo2Gkx:TXkzHlJFKl50GqtB5PPwm2x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256146fb868f4bc481d68d9cd91c17a9_JaffaCakes118
Files
-
256146fb868f4bc481d68d9cd91c17a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
e96c4bed2e87ac488cc029ff034f5a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetModuleFileNameA
CreateThread
GetTempPathA
lstrlenA
GetEnvironmentVariableA
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindFirstFileA
HeapAlloc
WriteFile
FindClose
Sleep
GetTickCount
lstrcatA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetLastError
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
user32
wsprintfA
advapi32
RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ