Static task
static1
Behavioral task
behavioral1
Sample
8af524b7ea419a304513deef0d5a7581_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8af524b7ea419a304513deef0d5a7581_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8af524b7ea419a304513deef0d5a7581_JaffaCakes118
-
Size
6KB
-
MD5
8af524b7ea419a304513deef0d5a7581
-
SHA1
ace9ffbef345e7961a3c230ac1a5f74185a07b64
-
SHA256
2dc2cf510e005960311e9aadbce04186136daab0ce8d1308c3937f581341aa81
-
SHA512
7d052aa1d93167c0fe78f144ffb080f907fbb4d9426f3b12e83f5411ddf0d827e95c4d21a1746e37240bfe7d3d4b9e2da9a1f996b626a4395b1e178196c26a19
-
SSDEEP
96:sJKBakxR9kHGMMnmJsQX6xBc9rMFXRyc1I1OwTer2PWRxEb4:sJKB1TMuGfK49rQXRyamE2PWR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af524b7ea419a304513deef0d5a7581_JaffaCakes118
Files
-
8af524b7ea419a304513deef0d5a7581_JaffaCakes118.exe windows:4 windows x86 arch:x86
040b5a33fb847ba3e8f09f56346f7264
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
GetTempPathA
Sleep
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GetFileAttributesA
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceA
WinExec
GetPrivateProfileStringA
ExitProcess
WaitForSingleObject
ResetEvent
CreateEventA
OpenEventA
GetLastError
CreateMutexA
GetModuleFileNameA
GetWindowsDirectoryA
OutputDebugStringA
UnmapViewOfFile
GetFileSize
CreateFileMappingA
MapViewOfFile
OpenProcess
CreateFileA
DuplicateHandle
GetCurrentProcess
DeleteFileA
CloseHandle
advapi32
StartServiceA
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
QueryServiceStatus
wininet
DeleteUrlCacheEntry
shlwapi
PathAppendA
SHDeleteKeyA
msvcrt
_stricmp
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ