Static task
static1
Behavioral task
behavioral1
Sample
753b10e06917d57f0799a462ee83d1a6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
753b10e06917d57f0799a462ee83d1a6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
753b10e06917d57f0799a462ee83d1a6_JaffaCakes118
-
Size
104KB
-
MD5
753b10e06917d57f0799a462ee83d1a6
-
SHA1
e52c954b0f7a6203dcc14a5afe81972576eba9d9
-
SHA256
de7daad94a07d0699efb93ed9f33f70321a14549c8c8ffd99c0b3e83bac28888
-
SHA512
fe646da31d747c32a16b2a76e25fd3bab9d129e355fafa306bb809f5c1547eb677020d93b2d9d1ec65eabe5feb28e7ab8218efc4365c9fba4efdabd98168c333
-
SSDEEP
3072:S+CYVLEYHzWbj5gK9UlWtL6seVJooXHfDK3clI2:S+CYVXIjuWtLOjHfDKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 753b10e06917d57f0799a462ee83d1a6_JaffaCakes118
Files
-
753b10e06917d57f0799a462ee83d1a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
882274a33186d269badb07df3de43e74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrlenA
SetLastError
lstrcpyA
HeapFree
FindResourceA
LoadResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
FreeResource
GetModuleFileNameA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryA
GetTickCount
Sleep
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
user32
GetMessageA
PostThreadMessageA
GetInputState
wsprintfA
advapi32
GetAce
DeleteService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
AddAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
QueryServiceStatus
GetUserNameA
RegQueryValueExA
CreateServiceA
ControlService
shlwapi
SHDeleteKeyA
netapi32
NetApiBufferFree
NetUserGetLocalGroups
msvcrt
strchr
srand
rand
fopen
_except_handler3
_stricmp
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ