Static task
static1
Behavioral task
behavioral1
Sample
36aa9d8c0aeed019eee2ac8752fba6e5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36aa9d8c0aeed019eee2ac8752fba6e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36aa9d8c0aeed019eee2ac8752fba6e5_JaffaCakes118
-
Size
184KB
-
MD5
36aa9d8c0aeed019eee2ac8752fba6e5
-
SHA1
bb34a745c98b1de320107bca64003fb1009e3505
-
SHA256
91cf31beb5a588635737f2b432f1b29d50969317b4cbb30ff7e5bc8a08615bdc
-
SHA512
f2a65fc3db60c9c5ff5b6724bc849d35a50f2d0c887eb16be9cfff4dd59513035c3553d26b97e8526228ab4f479dc41d701b6e0620b351475687b5223242628d
-
SSDEEP
3072:FgTJGNW7o+AsUwdr+DQrkh8aJ4sShWuCLSZIIrnQPYOGt:elCao+KwdCD87W4sPVGjTQQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36aa9d8c0aeed019eee2ac8752fba6e5_JaffaCakes118
Files
-
36aa9d8c0aeed019eee2ac8752fba6e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a783323a4941e01a49fd4c9bd3360ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
CoCreateInstance
CoCreateGuid
advapi32
CryptAcquireContextA
OpenSCManagerA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
RegSetValueExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
shell32
SHGetSpecialFolderPathA
shlwapi
SHEnumKeyExA
SHEnumValueA
StrStrIA
SHGetValueA
SHSetValueA
rpcrt4
UuidToStringA
user32
wsprintfA
msvcrt
printf
strlen
tolower
isspace
isalpha
islower
isdigit
__mb_cur_max
atoi
strncpy
rand
wcscpy
mbstowcs
sprintf
srand
strerror
strcat
strcpy
isupper
ispunct
isxdigit
??2@YAPAXI@Z
fwrite
fclose
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
wctomb
isalnum
time
memcmp
memset
memcpy
malloc
free
isgraph
imagehlp
ImageNtHeader
kernel32
lstrlenA
GetModuleHandleA
GetStartupInfoA
GetLastError
GetFileAttributesExA
SetFileTime
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CreateFileA
CloseHandle
GetSystemDirectoryA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
WideCharToMultiByte
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE