Static task
static1
Behavioral task
behavioral1
Sample
33b935d56f706558b7d27df8ccd58a60_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33b935d56f706558b7d27df8ccd58a60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b935d56f706558b7d27df8ccd58a60_JaffaCakes118
-
Size
88KB
-
MD5
33b935d56f706558b7d27df8ccd58a60
-
SHA1
aaf4512d97dfc743eab1db849feb8c5b22093f08
-
SHA256
9aa98a1edef3964c0b6ac1a6d4bb190227cb24b36acdf49d2f91ce36e0057c9c
-
SHA512
807f3f5bf5b20835890d2302a1af7750bc8c5d0d6f983b3a236c5689a44470fb4c6bb5a39a336e415a1042257914932b583d50fa50882f5ec4efc7d0a72ea0fa
-
SSDEEP
1536:6wjslQTzQ8QWiz/j2abQxJA1mkwmooBBY4yo3Kq:6wj6QQRRQbExXyo3Kq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b935d56f706558b7d27df8ccd58a60_JaffaCakes118
Files
-
33b935d56f706558b7d27df8ccd58a60_JaffaCakes118.exe windows:4 windows x86 arch:x86
79a562e7906f672c150cb8aeb1ca2dd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
GetCurrentThreadId
CloseHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
Process32Next
SetLastError
CreateToolhelp32Snapshot
GetComputerNameA
GetSystemDefaultLCID
GetOEMCP
GetACP
GetCPInfo
HeapFree
GetLastError
GetProcessHeap
HeapAlloc
CreateThread
GetTickCount
GetCurrentProcessId
GetCurrentThread
GetThreadPriority
MultiByteToWideChar
GetModuleFileNameA
GetCurrentProcess
Process32First
SetErrorMode
CreateFileA
SetStdHandle
IsBadCodePtr
SetEndOfFile
IsBadReadPtr
Sleep
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
ReadFile
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
FlushFileBuffers
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetForegroundWindow
GetWindow
GetWindowRect
gdi32
GetCurrentObject
advapi32
DuplicateTokenEx
SetServiceStatus
StartServiceCtrlDispatcherA
StartServiceA
ControlService
DeleteService
CreateServiceA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
OpenProcessToken
shell32
ShellExecuteExW
oleaut32
SysFreeString
SysAllocStringLen
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ