Static task
static1
Behavioral task
behavioral1
Sample
3595080f163610cc96c0c73640f74d60_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3595080f163610cc96c0c73640f74d60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3595080f163610cc96c0c73640f74d60_JaffaCakes118
-
Size
176KB
-
MD5
3595080f163610cc96c0c73640f74d60
-
SHA1
968901b4929a04f8b266fb43d3033f2eca0bc70a
-
SHA256
415ef227d8058a1a7a9150cdfd9d3ea59dca0b8cfc0edb78f54f1a68297a90cd
-
SHA512
7908a372dfb6f1b5aae1d07ad22c34b19bee9357f82587cdbb38f59640ac606a2a7af3f2da66d75c3adb6a89fddfa1ce2f52bb4ad89734d99e4b19e07ee28166
-
SSDEEP
3072:/vqzDvrPhIlndDS9s5djkx0GtLcQdddddddddddddddddddddddddddddddSRA5G:iDDPhGdDSW5djkKGtYQdddddddddddda
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3595080f163610cc96c0c73640f74d60_JaffaCakes118
Files
-
3595080f163610cc96c0c73640f74d60_JaffaCakes118.exe windows:4 windows x86 arch:x86
2209fee41cc738fe60bdcf494ec76f2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
Sleep
HeapAlloc
GetProcessHeap
GetVersionExA
CreateFileA
GetFileTime
Process32Next
Process32First
CreateProcessA
GetShortPathNameA
GetModuleFileNameA
CompareStringW
CompareStringA
WriteFile
CloseHandle
WaitNamedPipeA
LoadLibraryA
GetProcAddress
GetFileAttributesA
FreeLibrary
SetFileTime
MoveFileExA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetEnvironmentVariableA
user32
wsprintfA
advapi32
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
QueryServiceStatus
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ