Static task
static1
Behavioral task
behavioral1
Sample
849779e9e42aecfbb18f850632a1f9c4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
849779e9e42aecfbb18f850632a1f9c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
849779e9e42aecfbb18f850632a1f9c4_JaffaCakes118
-
Size
181KB
-
MD5
849779e9e42aecfbb18f850632a1f9c4
-
SHA1
19c9be2c44664495c69954bd649b15cd509eadcc
-
SHA256
2fb8c678a6c0d5a9385136148d239a85955435b8749e273d427b50c512161ac5
-
SHA512
d087f4c5b5062c7ade01e83b950a1229a35c551bf63a88d1fee0f50636ec9a00c82d819e83913589ea6845e26a6d03dab1c550b3976845acce29edc3c894d235
-
SSDEEP
3072:mmT/5Dn2CO9IjOTQrY9tFhfNVZctyOFtL0p0iG+3/jaI:aCO9wOTFfiyOFTiT/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 849779e9e42aecfbb18f850632a1f9c4_JaffaCakes118
Files
-
849779e9e42aecfbb18f850632a1f9c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
91e56cdbc04c8061e2914902c7548fbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
advapi32
InitializeAcl
CloseServiceHandle
FreeSid
RegCloseKey
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
GetLengthSid
AllocateAndInitializeSid
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
kernel32
RaiseException
SetEnvironmentVariableA
GetProcAddress
LoadLibraryA
HeapFree
lstrlenA
GetTickCount
lstrcpyA
MultiByteToWideChar
WritePrivateProfileStringA
GetLastError
ReadFile
GetStdHandle
WriteFile
CreateFileA
CloseHandle
SetFilePointer
SetEndOfFile
WideCharToMultiByte
VirtualAlloc
VirtualFree
CompareStringW
HeapReAlloc
HeapAlloc
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ