Static task
static1
Behavioral task
behavioral1
Sample
436726188a7641f49725fe1da1c024e5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
436726188a7641f49725fe1da1c024e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
436726188a7641f49725fe1da1c024e5_JaffaCakes118
-
Size
1.3MB
-
MD5
436726188a7641f49725fe1da1c024e5
-
SHA1
b532bac5cdbd3e24e2a7f353bdd9678469423397
-
SHA256
8a3fc80c51fbf7c20c61937f0352e170c3e9bb6a79f28801b41bac111b8bd832
-
SHA512
80c75ba4409b4131ba02a6d0d6f9eaa630ddb5e52c2d29c0069649a19e002e48aef35e80a4ad7d5d8b2e8f5cd2eebc2ef85ac0226544b8d8604fbe8098e09133
-
SSDEEP
24576:qVsQrL7AmQljclaT5r3SsoqLHqS3G7FAD2LxLUEXrtCMWhQPE7S:qX7uljjTR39h2cG7SaLMM4QPK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436726188a7641f49725fe1da1c024e5_JaffaCakes118
Files
-
436726188a7641f49725fe1da1c024e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
26197317de0c30f977e0873076f7d845
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleFileNameA
MoveFileExA
SetThreadPriority
CreateFileW
GetCommandLineA
CreateProcessA
GetCurrentThreadId
CreateThread
WaitForSingleObject
DeviceIoControl
GetTempPathA
SetFileAttributesA
DeleteFileA
WriteFile
GetShortPathNameA
Sleep
ReleaseSemaphore
GetVersionExA
GetStringTypeW
GetStringTypeA
CreateToolhelp32Snapshot
Process32First
Process32Next
Module32First
GetWindowsDirectoryA
Module32Next
GetCurrentProcessId
OpenProcess
TerminateProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetLastError
LCMapStringW
CreateFileA
CreateSemaphoreA
lstrlenA
lstrcpyA
RtlUnwind
HeapAlloc
HeapFree
GetVersion
ExitProcess
HeapReAlloc
GetCurrentProcess
HeapSize
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
LCMapStringA
CloseHandle
user32
FindWindowA
MessageBoxA
GetInputState
PostThreadMessageA
GetMessageA
CharUpperBuffA
GetSystemMetrics
SetWindowTextA
advapi32
RegEnumKeyExA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
StartServiceA
CreateServiceA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
hid
HidD_SetFeature
HidD_GetFeature
HidP_GetScaledUsageValue
HidP_GetUsageValue
HidP_GetUsages
HidP_SetUsageValue
HidP_SetUsages
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetPreparsedData
HidP_GetSpecificValueCaps
HidD_GetHidGuid
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pack Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE