Static task
static1
Behavioral task
behavioral1
Sample
25e32e7a343c794c7109af1ef9b58f95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
25e32e7a343c794c7109af1ef9b58f95_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25e32e7a343c794c7109af1ef9b58f95_JaffaCakes118
-
Size
128KB
-
MD5
25e32e7a343c794c7109af1ef9b58f95
-
SHA1
d498cc9258f93cd2ef1e213b9f16f5bf2632a15a
-
SHA256
a1ba2f60ac46668f4e20e57d15604b143b7f977d7d126f5122d351e4047418ee
-
SHA512
7989810f9713f59ac4e210ca09c9b866122c6b02a163c839fc997a649b2c9858d418a723ffc213fbc1ee1a034fbfff02bbffeb25c27bb60b2b8053da3c789721
-
SSDEEP
3072:NmGaaJZC/WjyZr5iu9BBO7yaOyTYp3hGjibNTDsVi5zqDA:NfOmaBB9bVN8jix0i5zP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e32e7a343c794c7109af1ef9b58f95_JaffaCakes118
Files
-
25e32e7a343c794c7109af1ef9b58f95_JaffaCakes118.exe windows:4 windows x86 arch:x86
19aca6a1cf9228b8139f7114f453b0a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GlobalAlloc
WinExec
GetVersionExA
GlobalUnlock
CreateFileA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
GlobalFree
LoadLibraryA
GetProcAddress
GetFileAttributesExA
SetFileTime
CloseHandle
Sleep
GetSystemDirectoryA
GetLastError
user32
ShowWindow
GetDesktopWindow
DispatchMessageA
GetMessageA
TranslateMessage
RegisterClassExA
CreateWindowExA
DefWindowProcA
PostQuitMessage
advapi32
LookupAccountNameA
RegQueryValueExA
RegCloseKey
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService
OpenServiceA
ConvertSidToStringSidA
GetUserNameA
StartServiceA
RegOpenKeyExA
msvcrt
__getmainargs
_strlwr
_controlfp
__set_app_type
__p__fmode
sprintf
rand
fclose
fflush
fwrite
fopen
strstr
_access
_except_handler3
srand
time
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
StrStrA
SHSetValueA
SHDeleteKeyA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ