Static task
static1
Behavioral task
behavioral1
Sample
757055d477cba5b1e2c855925ba607ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
757055d477cba5b1e2c855925ba607ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
757055d477cba5b1e2c855925ba607ce_JaffaCakes118
-
Size
15KB
-
MD5
757055d477cba5b1e2c855925ba607ce
-
SHA1
4f1511793c3ba06d0dd2672fd3e84d89ba67e92c
-
SHA256
9057971e7d76de0d348c819cc2879367163e4652ffd20fd0e74bafbeeda13220
-
SHA512
52b4cc84763c28c4f5e7bfeb9c93536f8df979eb07693a626c4dc3f9c93634928912b12a0a940663568555a607a256695b5766c4a6481d75d297238fc6629765
-
SSDEEP
192:ooV6c+yl5R5nWfO/XpYsiM9lpL1Ot7UEk1RaHKxg4nV/Vybs1u0Yb8lh7WMkT+cE:ok+8RuOBYsln1OtgiSA4w0YUhYWmnoR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 757055d477cba5b1e2c855925ba607ce_JaffaCakes118
Files
-
757055d477cba5b1e2c855925ba607ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
9cf64e18654879d40bc6ee5812e35727
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
DeviceIoControl
Sleep
GetFileAttributesA
GetTickCount
CreateProcessA
VirtualFree
CopyFileA
FindFirstFileA
FindNextFileA
FindClose
ExitProcess
LoadLibraryA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
GetProcAddress
GetCurrentProcess
DeleteFileA
CreateFileA
ReadFile
WriteFile
GetCurrentDirectoryA
GetLogicalDrives
CloseHandle
user32
MessageBoxA
DestroyWindow
ScreenToClient
SetCursor
advapi32
RegQueryValueExA
OpenProcessToken
GetTokenInformation
RegDeleteValueA
RegCreateKeyExW
ControlService
DeleteService
OpenSCManagerA
RegConnectRegistryW
OpenServiceA
QueryServiceStatusEx
StartServiceA
CloseServiceHandle
CreateServiceA
FreeSid
RegQueryMultipleValuesA
CheckTokenMembership
AllocateAndInitializeSid
RegOpenKeyW
RegEnumKeyExW
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE