Static task
static1
Behavioral task
behavioral1
Sample
3b92821cd3b8c3f064a91d9691fb3d60_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b92821cd3b8c3f064a91d9691fb3d60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b92821cd3b8c3f064a91d9691fb3d60_JaffaCakes118
-
Size
60KB
-
MD5
3b92821cd3b8c3f064a91d9691fb3d60
-
SHA1
ba424d1989e7e6e3ff3fc0af6ef3d1963d9bec7a
-
SHA256
308a4981a87ca6b4d8f21e7817d5be9fa1a0a57bb7b65e71c17ce1c7661d9548
-
SHA512
76f791df8bd433e4fa0628ea7e75c6204a29a18aa3fff3db90c4b20c2ef2048f86e21e5092e4c04d77a836a4b0a21532acba6f77e056d61bcae222cf987ef3cc
-
SSDEEP
1536:twlO8iRc0GGCH4gAGscKRuqJMMfuU+Mx3icp:G1UfGGCH4AqL2U7i2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b92821cd3b8c3f064a91d9691fb3d60_JaffaCakes118
Files
-
3b92821cd3b8c3f064a91d9691fb3d60_JaffaCakes118.exe windows:4 windows x86 arch:x86
21d5b01288ba0f71549186f1564d739a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetSystemDirectoryA
CreateProcessA
WinExec
GetLastError
HeapFree
HeapAlloc
lstrcatA
GetFileInformationByHandle
GetProcAddress
GetModuleHandleA
LocalFree
IsBadReadPtr
CreateDirectoryA
ReadFile
lstrcpyA
CopyFileA
GetVersionExA
CreateFileA
CloseHandle
WriteFile
GetProcessHeap
GetStartupInfoA
user32
GetDesktopWindow
advapi32
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
OpenSCManagerA
RegOpenKeyExA
CreateServiceA
OpenServiceA
StartServiceA
GetUserNameA
shell32
ShellExecuteA
psapi
GetModuleFileNameExA
msvcrt
_controlfp
_except_handler3
memmove
memcpy
free
malloc
memset
??3@YAXPAX@Z
strcat
strcpy
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
ntdll
ZwCreateSymbolicLinkObject
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plugins Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE