Static task
static1
Behavioral task
behavioral1
Sample
69de40499c7d3d8884ec9916849bbb02_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69de40499c7d3d8884ec9916849bbb02_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69de40499c7d3d8884ec9916849bbb02_JaffaCakes118
-
Size
140KB
-
MD5
69de40499c7d3d8884ec9916849bbb02
-
SHA1
74b006e866db2a69df81f156ec410dcb464ea1a4
-
SHA256
8e7a8c2b107056f0f35cb0ee1e9df267b02398f3acdc0da66f5c5b06a67a0416
-
SHA512
2d85d83d617a0e13ce9e61984ffc67c109c2780d01779784071484f704c131db18dbfad5710b30188fe3e4aa147df53d0f1dbdef8c039324aa6d2ee40dd272c0
-
SSDEEP
3072:1jVdOMIi6FJ2AeJ9CW1bzp2LFNCpCu0aYiAllp+BU:15dO39Whp2LbCpCu0diAlfcU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69de40499c7d3d8884ec9916849bbb02_JaffaCakes118
Files
-
69de40499c7d3d8884ec9916849bbb02_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2715ffc73f3b37f90a55823768d5078
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetLastError
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExA
GetStartupInfoA
GetModuleHandleA
CreateFileA
WriteFile
OpenProcess
GetCurrentProcess
CloseHandle
DuplicateHandle
Sleep
WinExec
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
user32
ShowWindow
GetDesktopWindow
DispatchMessageA
GetMessageA
TranslateMessage
RegisterClassExA
CreateWindowExA
DefWindowProcA
PostQuitMessage
advapi32
GetUserNameA
DeleteService
CreateServiceA
OpenSCManagerA
CloseServiceHandle
StartServiceA
ConvertSidToStringSidA
LookupAccountNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
OpenServiceA
msvcrt
__getmainargs
_stricmp
_controlfp
__set_app_type
__p__fmode
fclose
fflush
fwrite
fopen
sprintf
_except_handler3
??3@YAXPAX@Z
rand
??2@YAPAXI@Z
srand
time
_access
strstr
_exit
_XcptFilter
exit
_acmdln
_strlwr
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHDeleteKeyA
SHSetValueA
StrStrA
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ