Static task
static1
Behavioral task
behavioral1
Sample
426e76f91afa7fafb320f55742d785f4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
426e76f91afa7fafb320f55742d785f4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
426e76f91afa7fafb320f55742d785f4_JaffaCakes118
-
Size
23KB
-
MD5
426e76f91afa7fafb320f55742d785f4
-
SHA1
56139884584c9c9ed0bfa31d9ac32b24861b7e57
-
SHA256
e4cce0d41ed045380af503e4f7e4cd6838f37e9b27beda9a6a811e04facf1564
-
SHA512
e66122fd1c4ec9e2f92cd00ffdfaf104ae4ab962f2626df1c81fc001a2073fc7f8d01426ee638033569d1401d7500c01dec95d85bb020702a40442f7b9866a38
-
SSDEEP
384:+VL3mmKf1wLmXIfZF2ZG9GhH80EwgnDUFLzam9azqaU4TqhcaMOg:+V5Ktt80QDUJanU4Uc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426e76f91afa7fafb320f55742d785f4_JaffaCakes118
Files
-
426e76f91afa7fafb320f55742d785f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c07ca82d47e26ea97d3280b519f44b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
LoadLibraryA
GetVersionExA
ResumeThread
SetThreadPriority
GetCurrentThread
SetFileAttributesA
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CopyFileA
GetSystemDirectoryA
GetModuleHandleA
GetTickCount
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
CreateThread
ExitThread
ExitProcess
GetTempPathA
DeleteFileA
CreateProcessA
GetCurrentProcess
Sleep
GlobalMemoryStatus
GetComputerNameA
lstrlenA
lstrcpyA
SetPriorityClass
GetStartupInfoA
user32
ExitWindowsEx
wsprintfA
advapi32
RegCreateKeyA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CreateServiceA
StartServiceA
msvcrt
printf
sprintf
rand
strstr
srand
time
exit
_except_handler3
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ws2_32
send
recv
WSAGetLastError
setsockopt
connect
socket
inet_addr
closesocket
WSACleanup
WSAStartup
gethostbyname
gethostname
sendto
WSASocketA
inet_ntoa
htonl
htons
Sections
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ