Static task
static1
Behavioral task
behavioral1
Sample
2a0f7418736cd6c51f6f4fc98e3eb051_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a0f7418736cd6c51f6f4fc98e3eb051_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a0f7418736cd6c51f6f4fc98e3eb051_JaffaCakes118
-
Size
48KB
-
MD5
2a0f7418736cd6c51f6f4fc98e3eb051
-
SHA1
1f1ac5361d4681832eae55aa977a0fc9f4c947b0
-
SHA256
8ae4f180abc47e2bab943f80b43e8eda35a87a31ab296625c5b339079e9e51e6
-
SHA512
274c7743f7073a3f5507b4f9a88f45aa775cec1cd162ae1bfd6de2c9f0cc726acd516278ec23f752778ddb7b3e82bf2300b7bee5c1746cd49d4e5ffafcfc4deb
-
SSDEEP
768:uO0ZDMZ0NxpZwHA30RmIT3IkCYH9hjLX69WX18uQwLSHiqZlDTH5UI3EDrZFpyp9:u/QyNHZAqbYdh6ol70iqZFTHQFFkp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a0f7418736cd6c51f6f4fc98e3eb051_JaffaCakes118
Files
-
2a0f7418736cd6c51f6f4fc98e3eb051_JaffaCakes118.exe windows:4 windows x86 arch:x86
fad5c23e9f3885fffb5881203d7140ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
ReadProcessMemory
GetThreadContext
TerminateProcess
SetThreadContext
WriteProcessMemory
FreeLibrary
VirtualFree
GetStartupInfoA
VirtualAlloc
GetModuleHandleA
LoadLibraryA
GetProcAddress
CopyFileA
GetLastError
lstrlenA
Sleep
GetTickCount
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
GetSystemDirectoryA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetTempPathA
WinExec
CreateFileA
WriteFile
CloseHandle
VirtualProtectEx
user32
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegCloseKey
msvcrt
_XcptFilter
rand
__CxxFrameHandler
exit
strftime
localtime
time
strncmp
_except_handler3
strchr
strncat
memmove
_exit
_strnicmp
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Sections
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE