Static task
static1
Behavioral task
behavioral1
Sample
3708323deff5839975286f6834c4a1e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3708323deff5839975286f6834c4a1e8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3708323deff5839975286f6834c4a1e8_JaffaCakes118
-
Size
55KB
-
MD5
3708323deff5839975286f6834c4a1e8
-
SHA1
bbb6df24cb02f45e8350bc9fc3737789c7ba9593
-
SHA256
07c21a56668a14b5adb5787f2a5447ec24eb3a60d7eb7cf3512c6cc8f20383eb
-
SHA512
72d66551cb368090b7b00d207e71005969656bd46024b275a8b72d3e59adf2568cb8499dc4fb280ccd85ab2335fb1ff10bc96236f5c4538b11a28b14cbc35d9f
-
SSDEEP
1536:slhGCbvcs9d7O5k58taRrXwF/xBPQfFTvM0g:sbZbvcs9dC5NaCF/vPug0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3708323deff5839975286f6834c4a1e8_JaffaCakes118
Files
-
3708323deff5839975286f6834c4a1e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
b167b51d86a48e82626b60aa24ac51a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
DeleteFileA
GetSystemDirectoryA
CopyFileA
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetLastError
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
WriteFile
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
CloseServiceHandle
GetUserNameA
ControlService
DeleteService
CreateServiceA
StartServiceA
OpenSCManagerA
OpenServiceA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE