Static task
static1
Behavioral task
behavioral1
Sample
65a7e8620e68d16d65a78b800fd31479_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65a7e8620e68d16d65a78b800fd31479_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65a7e8620e68d16d65a78b800fd31479_JaffaCakes118
-
Size
105KB
-
MD5
65a7e8620e68d16d65a78b800fd31479
-
SHA1
dfe4b94aa76bbca769edadba15a6f0a1b5cf8e1d
-
SHA256
2f96135d3d40e5beee264831c33510dd057be98c8d768a8fae7ab2faeaf89bf3
-
SHA512
e585cb9388a7db74425bf2bb13bc0ba10e8972dfc5dd3e9d82e7671a28bcb9a74be4280ea99b4c9cca2ac4c214aef3d3fb8969257d3b1685c3d171bc0e0a3112
-
SSDEEP
1536:kUvMN+yDE19DgMal5b6EMB1SF2pJvX4XhVJHM1tepqtm:k/+yDE19gnnezBGGX4XhVJs1tpm
Malware Config
Signatures
Files
-
65a7e8620e68d16d65a78b800fd31479_JaffaCakes118.exe windows:4 windows x86 arch:x86
5eb5605105dd037280c95d1ee86efa67
Code Sign
74:ed:9f:fa:fa:75:2a:bf:40:2d:3a:b9:ce:84:8d:34Certificate
IssuerCN=Root AgencyNot Before20/04/2011, 06:04Not After31/12/2039, 23:59SubjectCN=cloudweb IncSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetCurrentProcessId
GetCurrentThreadId
GetTempPathA
MoveFileA
WriteFile
CreateFileA
GetShortPathNameA
CreateProcessA
GetVersionExA
GetProcAddress
OutputDebugStringA
GetFileAttributesExA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetFilePointer
CreateDirectoryA
GetLocalTime
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
ResetEvent
ExpandEnvironmentStringsA
DeleteFileA
LoadLibraryExA
CopyFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
FreeLibrary
CloseHandle
Sleep
GetTickCount
GetLastError
SetEvent
lstrcpyA
GetModuleFileNameA
lstrcmpiA
CreateEventA
CreateThread
WaitForSingleObject
lstrlenA
TerminateThread
GetModuleHandleA
SetStdHandle
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapSize
WideCharToMultiByte
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FlushFileBuffers
user32
wvsprintfA
wsprintfA
advapi32
RegEnumKeyA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
StartServiceCtrlDispatcherA
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
shell32
SHGetFileInfoA
ShellExecuteA
wininet
InternetReadFile
HttpQueryInfoA
InternetSetOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shlwapi
SHDeleteKeyA
SHDeleteValueA
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ