Static task
static1
Behavioral task
behavioral1
Sample
36ec17c1be829b346ecfdee5e39ff123_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36ec17c1be829b346ecfdee5e39ff123_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36ec17c1be829b346ecfdee5e39ff123_JaffaCakes118
-
Size
93KB
-
MD5
36ec17c1be829b346ecfdee5e39ff123
-
SHA1
63c68bdaa29ec42d6a802808401bfee64c5bf5e4
-
SHA256
5e3bb604d849b21449a4d012876faa7dfde445720f6a360b7a91c6ccc47552af
-
SHA512
4c433d16b1e696dcdd3fc579ec74a3382e5e572f9f1d2b404af559157ed6541634c094e49e9859a0218fb7c777baf4c1130e41708f1daca59c43ba8162faf0c4
-
SSDEEP
1536:/JmojmXErjo37bgrMXUMc1DcpRwNRYvpToTyIeiHgobCL722Bd:/YojYrCMXUMscvoSywiHgobCL722v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36ec17c1be829b346ecfdee5e39ff123_JaffaCakes118
Files
-
36ec17c1be829b346ecfdee5e39ff123_JaffaCakes118.exe windows:4 windows x86 arch:x86
8236c7f0a04775ad14888e89afa77d40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
LoadLibraryA
SetFileAttributesA
FindClose
FindFirstFileA
GetProcAddress
Sleep
FindNextFileA
SetFileTime
GetFileTime
CreateFileA
MultiByteToWideChar
MoveFileA
MoveFileExA
WriteFile
FreeLibrary
GetCommandLineA
GetSystemTime
GetWindowsDirectoryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetSystemDirectoryA
DeleteFileA
GetModuleFileNameA
CopyFileA
FormatMessageA
HeapFree
CreateEventA
LocalFree
ResetEvent
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForMultipleObjects
CreateThread
GetLastError
CloseHandle
WaitForSingleObject
CreateDirectoryA
DeleteCriticalSection
GetCPInfo
FlushFileBuffers
SetStdHandle
CreateProcessA
InitializeCriticalSection
GetEnvironmentStrings
FreeEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
SetFilePointer
ReadFile
RtlUnwind
ExitProcess
GetStartupInfoA
GetTimeZoneInformation
GetLocalTime
GetModuleHandleA
HeapReAlloc
GetVersion
HeapAlloc
HeapSize
user32
SetForegroundWindow
MessageBoxA
SetWindowPos
IsWindowVisible
GetForegroundWindow
FindWindowA
advapi32
CloseServiceHandle
CreateServiceA
RegEnumKeyExA
RegCreateKeyExA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
StartServiceCtrlDispatcherA
RegSetValueExA
ControlService
DeleteService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegQueryValueExA
OpenSCManagerA
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
wininet
InternetOpenUrlA
InternetGetConnectedState
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetSetOptionA
HttpQueryInfoA
wsock32
WSACleanup
WSAStartup
gethostname
gethostbyname
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ