Static task
static1
Behavioral task
behavioral1
Sample
740372080ee530c8546873b51b19cd61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
740372080ee530c8546873b51b19cd61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
740372080ee530c8546873b51b19cd61_JaffaCakes118
-
Size
24KB
-
MD5
740372080ee530c8546873b51b19cd61
-
SHA1
f40696730799fb7333b9fc4a114d530f472131a5
-
SHA256
5bb848cbe59e2bb031a3fa7c006443cf7bc4db0f326fcede679762c01d51eb53
-
SHA512
867f807c05915d9f4f4899b22aa1a33b75205525bedf798e566761c4d658ceee4628f345be2c0d7303e02ac3014ea83eab93f3f49cae40deb909eda91df71bf4
-
SSDEEP
384:jxrhv7U29zbzGkvr212SOfcN99OKagHuuadAoJ3n:jXvzg2SOo9FpHulJ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 740372080ee530c8546873b51b19cd61_JaffaCakes118
Files
-
740372080ee530c8546873b51b19cd61_JaffaCakes118.exe windows:4 windows x86 arch:x86
b17f7bb3d16304c9b48228f503e871d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
ReadFile
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetFileAttributesA
GetLastError
GetProcAddress
GetFileSize
CreateFileA
VirtualUnlock
Sleep
SetThreadPriority
GetCurrentThread
VirtualLock
MapViewOfFile
SetProcessAffinityMask
GetProcessAffinityMask
GetCurrentProcess
SetFilePointer
WriteFile
CloseHandle
SetFileAttributesA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
DeleteFileA
ExpandEnvironmentStringsA
CreateDirectoryA
LocalFree
user32
wsprintfA
advapi32
CloseServiceHandle
SetSecurityInfo
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
GetSecurityInfo
SetEntriesInAclA
ntdll
RtlUnwind
RtlInitUnicodeString
ZwOpenSection
ZwClose
_aullshr
_allmul
_chkstk
_stricmp
msvcrt
exit
_initterm
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
malloc
free
_exit
_XcptFilter
__getmainargs
_acmdln
__setusermatherr
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ