Static task
static1
Behavioral task
behavioral1
Sample
255ebb7a568a427b044fadc0a68c35d4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
255ebb7a568a427b044fadc0a68c35d4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
255ebb7a568a427b044fadc0a68c35d4_JaffaCakes118
-
Size
180KB
-
MD5
255ebb7a568a427b044fadc0a68c35d4
-
SHA1
30c9cac86d2bf85902c525e50680ff3497f763b6
-
SHA256
c0a20558f831c5c97eac6a9aa8fcd374d5bc61bed88acecb95f10243cbf4e7ee
-
SHA512
be82054097706547932be2cc751102fae2b19a2b8373a3aa61133a895bfc6af17cd1993ac36b75319f662626cab9ea711793f75d8e8abdfc068a2d75b96289f5
-
SSDEEP
3072:2bBWAVElJSIyIpyPMnqQOqk/gvC2epRx1M50pMwDRczocNQCAQp+ucrOHNPidr:oMpO/gvAj1M0MwyzoGA1aH9idr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255ebb7a568a427b044fadc0a68c35d4_JaffaCakes118
Files
-
255ebb7a568a427b044fadc0a68c35d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
87268a1b8cc8c145d1a6ab7146405e99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
advapi32
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
OpenSCManagerA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegSetValueExA
shlwapi
SHEnumValueA
StrStrIA
SHEnumKeyExA
SHSetValueA
SHGetValueA
rpcrt4
UuidToStringA
shell32
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateGuid
CoCreateInstance
msvcrt
strerror
islower
isalpha
tolower
free
memcmp
strlen
time
isupper
??2@YAPAXI@Z
isspace
ispunct
isxdigit
isalnum
atoi
strncpy
rand
wcscpy
mbstowcs
sprintf
srand
fclose
fwrite
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
memset
memcpy
strcpy
strcat
__mb_cur_max
malloc
wctomb
isgraph
imagehlp
ImageNtHeader
kernel32
GetModuleHandleA
GetStartupInfoA
GetFileAttributesExA
SetFileTime
lstrlenA
GetSystemDirectoryA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
GetLastError
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
CreateFileA
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE