Static task
static1
Behavioral task
behavioral1
Sample
7043318394e68d3b2250aeed3e166b1b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7043318394e68d3b2250aeed3e166b1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7043318394e68d3b2250aeed3e166b1b_JaffaCakes118
-
Size
112KB
-
MD5
7043318394e68d3b2250aeed3e166b1b
-
SHA1
914e8ea304187b507c59334969db7dcf0f54410b
-
SHA256
a604428026688f891dc96eee8628aa361aa8508cb091570dcbe5b80b86bbc311
-
SHA512
b844fe8c4de7de974c6e8f5670c2a12d35295f06e39899b9aae699d2f2edefa6c310691dfaf930d0713f6121ad1a3de12b5075a3749256c086b5f57ba2b1a5b1
-
SSDEEP
1536:eP20sMA/CbwEyCs87HRPTlp6JABRkte9Qp9vcA6MfRSq4JwZm5ksMu:r8oCs87xPr66bu9vL6uRSqYwZm5ksMu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7043318394e68d3b2250aeed3e166b1b_JaffaCakes118
Files
-
7043318394e68d3b2250aeed3e166b1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa9eb70a115265871bcdb88d49ccd805
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceA
lstrcatA
GetTempPathA
lstrcpyA
lstrlenA
lstrcmpiA
SetLastError
GetLastError
GetFileAttributesA
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetUnhandledExceptionFilter
CopyFileA
OutputDebugStringA
GetStringTypeA
LCMapStringW
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
CloseHandle
MoveFileA
ExitProcess
SetFileAttributesA
DeleteFileA
GetSystemDirectoryA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfA
advapi32
OpenSCManagerA
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.EN Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE