Static task
static1
Behavioral task
behavioral1
Sample
62aaca12b5ce032a18359951cbb2acb2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62aaca12b5ce032a18359951cbb2acb2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62aaca12b5ce032a18359951cbb2acb2_JaffaCakes118
-
Size
197KB
-
MD5
62aaca12b5ce032a18359951cbb2acb2
-
SHA1
a64ebce40ef22df166e0b09088fe9bca45e44c10
-
SHA256
5b6369de716614ad6bf4e86f3ab9cfe8b495bbded053bf513c64b5ce0cb4cb4d
-
SHA512
564c68bb136c386598cfd1fb697fcb90f1ca23f31902883c7273b42715e78b4706e9a3ebddef9a862e490f3df723b30531c643f3ba0f0753034777668617a0cb
-
SSDEEP
3072:21E01jrwnCl5P4xHIbOz5sWWtMm779hf2kh41HyB4YxPnuFoV6mL4zSf:eE05Un6NbOzdmj/21S9PCg0Sf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62aaca12b5ce032a18359951cbb2acb2_JaffaCakes118
Files
-
62aaca12b5ce032a18359951cbb2acb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f8df209f9a32ebfd9204643978eb1d10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetStdHandle
WriteFile
CreateFileA
SetFilePointer
GetModuleFileNameA
SetEndOfFile
WideCharToMultiByte
VirtualAlloc
VirtualFree
SetEnvironmentVariableA
CompareStringW
WritePrivateProfileStringA
lstrcatA
MultiByteToWideChar
Sleep
GetLastError
lstrcpyA
GetTickCount
GlobalFree
CloseHandle
lstrlenA
LoadLibraryA
GetProcAddress
CompareStringA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
RaiseException
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
StartServiceA
OpenServiceA
ChangeServiceConfigA
OpenSCManagerA
CloseServiceHandle
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyA
shell32
ShellExecuteA
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ