Static task
static1
Behavioral task
behavioral1
Sample
343b1456b029ee995a7dcb4ee2417c4b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
343b1456b029ee995a7dcb4ee2417c4b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
343b1456b029ee995a7dcb4ee2417c4b_JaffaCakes118
-
Size
36KB
-
MD5
343b1456b029ee995a7dcb4ee2417c4b
-
SHA1
9a425b9c6db1a23a13700d147557a15f46e30e57
-
SHA256
7e3a823a53f992b129a6a0b600fac0c7938fc6f52251e357ec61135fbf092cba
-
SHA512
a3515d7cf3d325e84dd2bf70d416c683350cc78e4755a2beec2e3511052b04062ed485d34b0c581465c5f7f38d386163097e6198828c30c57eea351599b9c98c
-
SSDEEP
768:SIitnrXab4SV5dtOXLGoIZLQTL7pLci2TAsO9EuQEi:bZt4ALQTlcvTAssQEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343b1456b029ee995a7dcb4ee2417c4b_JaffaCakes118
Files
-
343b1456b029ee995a7dcb4ee2417c4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35d5db5c6d9b952b57eb5257a0d8686
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
lstrlenA
CloseHandle
GetVersionExA
UnmapViewOfFile
lstrcpyA
GetSystemDirectoryA
SetFileAttributesA
GetTickCount
DeleteFileA
WinExec
Sleep
CopyFileA
MapViewOfFile
GetCurrentProcess
user32
FindWindowA
ExitWindowsEx
advapi32
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
StartServiceCtrlDispatcherA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
strcat
strcpy
rand
srand
time
fclose
fwrite
fopen
_strdup
strlen
fgets
fseek
printf
_CxxThrowException
putc
??2@YAPAXI@Z
getc
memcpy
fread
memset
free
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE