Static task
static1
Behavioral task
behavioral1
Sample
424b0edb65f5183d19538a7296b32a0f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
424b0edb65f5183d19538a7296b32a0f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
424b0edb65f5183d19538a7296b32a0f_JaffaCakes118
-
Size
174KB
-
MD5
424b0edb65f5183d19538a7296b32a0f
-
SHA1
2da7802f61352c5251b37de815f5bef5d4d20ad9
-
SHA256
275285c492ae2043a7cf35ba1c906743b1334104f9a0cd59aa8189a4d5658e33
-
SHA512
c779cf81b00b9a16ece903e0de867e2ce9d1dbc4efaa74e29b2b60a3679e7ac9da2250ea636144ca8fa173a4140673c624401f4ac40d7ba077a234ce77728503
-
SSDEEP
3072:cSS0vmSdsE7DaA/cspIMq6fc8hWsGfv5fzgcsCBE1UPkEJ2kM:cS3d9Z/cspIikhVnBE/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424b0edb65f5183d19538a7296b32a0f_JaffaCakes118
Files
-
424b0edb65f5183d19538a7296b32a0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2c2c77c0c1bcbff42659efaad7e89bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AllocateAndInitializeSid
ChangeServiceConfigA
GetSecurityDescriptorControl
InitializeSecurityDescriptor
LockServiceDatabase
LookupPrivilegeValueA
OpenSCManagerA
RegCreateKeyExA
RegDeleteKeyA
SetServiceStatus
kernel32
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
DisableThreadLibraryCalls
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FindFirstFileA
FindNextFileA
FlushFileBuffers
FreeLibrary
GetACP
GetCommandLineA
GetConsoleCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentVariableA
GetExitCodeProcess
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadTimes
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GlobalAlloc
GlobalHandle
GlobalUnlock
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
LockResource
Module32First
MulDiv
OpenEventA
OpenProcess
QueryPerformanceCounter
ReadProcessMemory
ResumeThread
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrcpynA
lstrlenA
user32
CallWindowProcA
CheckDlgButton
DefWindowProcA
DestroyWindow
EnableMenuItem
EndDialog
EqualRect
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItemTextA
GetFocus
GetMessageA
GetMessagePos
GetSubMenu
GetWindow
GetWindowDC
IsIconic
IsWindow
LoadBitmapA
LoadCursorA
LoadStringA
MessageBoxA
OffsetRect
SetCapture
SetDlgItemInt
SetTimer
SetWindowLongA
SetWindowRgn
wsprintfA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT Size: 136KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ