Static task
static1
Behavioral task
behavioral1
Sample
73f2b31d7fdcd87eb76b7768b50514b0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73f2b31d7fdcd87eb76b7768b50514b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73f2b31d7fdcd87eb76b7768b50514b0_JaffaCakes118
-
Size
192KB
-
MD5
73f2b31d7fdcd87eb76b7768b50514b0
-
SHA1
80c54865901eab863dcef800bcab9a60a1453053
-
SHA256
ef09578980d90dd1adc7f30b2b41dc0c669bd3961f9675801895c61f9b9e0000
-
SHA512
7cfd88b862ccf19ad1b5dcac9d7730bf7cb94e0237c715d50e92c3b3a5496cfcdd58624102d2f6cdabd5fd1119f8fcefda97dc051979d574a513ff7ea34d8cf6
-
SSDEEP
3072:sw/kM9G6WvKchzxd9uOagXjQSRpDe0xT3OIaNsq5NF9iQk8dm4cwjmgFdn:39G6WvKchzxd9ttfD/xT3OIasCiOm3Xa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73f2b31d7fdcd87eb76b7768b50514b0_JaffaCakes118
Files
-
73f2b31d7fdcd87eb76b7768b50514b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d18e95b3163e217e1572768bd618620
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
CharNextA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
strstr
strncpy
_CxxThrowException
__CxxFrameHandler
strcmp
strchr
strncat
strcat
memset
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
tolower
toupper
_ftol
srand
rand
strcpy
_except_handler3
_itoa
_strnicmp
_strlwr
_stricmp
_strupr
malloc
free
strlen
kernel32
InterlockedExchange
RaiseException
LoadLibraryA
LocalAlloc
FreeLibrary
GetLastError
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
DeleteFileA
SetFileAttributesA
CloseHandle
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
GetTickCount
lstrcatA
GetSystemDirectoryA
MultiByteToWideChar
GetWindowsDirectoryA
HeapFree
Sleep
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
ExitProcess
SetEnvironmentVariableA
GetTempPathA
MoveFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
FindNextFileA
FindFirstFileA
lstrcmpiA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
WideCharToMultiByte
GetStartupInfoA
GetCurrentDirectoryA
advapi32
SetFileSecurityA
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAce
EqualSid
GetAce
GetUserNameA
GetServiceKeyNameA
StartServiceA
ControlService
OpenSCManagerA
CreateServiceA
DeleteService
CloseServiceHandle
ChangeServiceConfig2A
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
GetFileSecurityA
LookupAccountNameA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetSecurityDescriptorControl
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ