Static task
static1
Behavioral task
behavioral1
Sample
378dea62d9b740eb7e13f87b30f8052e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
378dea62d9b740eb7e13f87b30f8052e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
378dea62d9b740eb7e13f87b30f8052e_JaffaCakes118
-
Size
188KB
-
MD5
378dea62d9b740eb7e13f87b30f8052e
-
SHA1
74b22a2e4bfe354263474d13001bc89f5e39516d
-
SHA256
90cc29404dba04fa8a402bd18b5be2a02b19f29cd8194daef80649b7ae60cd4c
-
SHA512
69de173ba6b5b6dd1a26824bb3357f2edce1b29912cc0a142043351a2f51c879a01414e9fa3da75083f4ffc721c1f9d4b6a117f8365330645c005bb9de1824a7
-
SSDEEP
3072:5CYA3E4SdT7k26KCAtJfYejUwRH+mbggsS6ouq:5C73EbdTI29CAtBNUwR2PSDu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 378dea62d9b740eb7e13f87b30f8052e_JaffaCakes118
Files
-
378dea62d9b740eb7e13f87b30f8052e_JaffaCakes118.exe windows:4 windows x86 arch:x86
495793555e6bb2777ccdd566855bf67f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
StartServiceA
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
ChangeServiceConfig2A
CloseServiceHandle
DeleteService
RegRestoreKeyA
RegSaveKeyA
CreateServiceA
ControlService
GetServiceDisplayNameA
GetServiceKeyNameA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
strncpy
srand
memset
strcpy
strchr
strcat
_except_handler3
_ftol
rand
strlen
memcpy
_strrev
_stricmp
_strlwr
__CxxFrameHandler
??2@YAPAXI@Z
__getmainargs
kernel32
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetCommandLineA
SetUnhandledExceptionFilter
ExpandEnvironmentStringsA
GetShortPathNameA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
SleepEx
CreateFileA
GetTickCount
WriteFile
GetFileTime
SetFileTime
MoveFileA
GetTempPathA
GetCurrentDirectoryA
ExitProcess
GetModuleHandleA
GetProcAddress
Sleep
CloseHandle
GetCurrentProcess
GetLastError
CreateDirectoryA
GetFileAttributesA
lstrlenA
DeleteFileA
SetFileAttributesA
GetCurrentProcessId
GetSystemDirectoryA
GetCurrentThread
ws2_32
listen
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ