Static task
static1
Behavioral task
behavioral1
Sample
35e68ca24db6467766750d066d04e821_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35e68ca24db6467766750d066d04e821_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35e68ca24db6467766750d066d04e821_JaffaCakes118
-
Size
20KB
-
MD5
35e68ca24db6467766750d066d04e821
-
SHA1
37cd4e7d2513f5cb4b418259a6bd1c52b9ba0642
-
SHA256
72d03bd8263f798c6a6becd76e9bd45f584c5a2f855cd5d941e089daa512a7ad
-
SHA512
7177b05c86949d380a97fd7f83fb95bfad112ae4f985a90f7e9105fb9cb89adb561dba9e65a422f10c936577838508b8d363061b073f79f3e3215046e983a092
-
SSDEEP
384:s/b66CobENv9tcpfQhbSXU2ojJQTzxl64ihq:QbEftIfQckDQTz3Vd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e68ca24db6467766750d066d04e821_JaffaCakes118
Files
-
35e68ca24db6467766750d066d04e821_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c7f928a51d770b36a8ccd4c03c126e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
UnmapViewOfFile
GetVersionExA
CloseHandle
MapViewOfFile
GetModuleFileNameA
LocalFree
FreeLibrary
LoadLibraryA
GetProcAddress
SetFileAttributesA
DeleteFileA
lstrlenA
GetCurrentProcess
GetSystemTime
SetSystemTime
user32
FindWindowA
ExitWindowsEx
advapi32
SetSecurityInfo
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegDeleteKeyA
OpenSCManagerA
CreateServiceA
RegOpenKeyA
RegSetValueExA
RegCloseKey
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityInfo
StartServiceCtrlDispatcherA
SetEntriesInAclA
shell32
ShellExecuteA
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
fclose
fwrite
fopen
rand
__CxxFrameHandler
_strdup
printf
_CxxThrowException
??2@YAPAXI@Z
putc
getc
fread
free
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE