Static task
static1
Behavioral task
behavioral1
Sample
8cd521e09ea24c264b561feaf21138da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cd521e09ea24c264b561feaf21138da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cd521e09ea24c264b561feaf21138da_JaffaCakes118
-
Size
79KB
-
MD5
8cd521e09ea24c264b561feaf21138da
-
SHA1
fc2a9fe55b31d22ace0e4cd691b2d87f41617d41
-
SHA256
74b796ad6859f42a314ed4a3292d883306cef184ca4f86562ae160c4fbf2fc54
-
SHA512
d4ca7bf9efa23c140e41ff27647e04aaefb5515af41bc7685a933430ed34b5e76db1b3fca3ef0ce4f579286a40bff96ea76ed63c562612c43b685e33205b34a4
-
SSDEEP
1536:I0cHumfF21oNZfcDtiFOt7xolp47w1VIZ0OtpD4iN:I0IFwCfcDtieFPOuvt94i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cd521e09ea24c264b561feaf21138da_JaffaCakes118
Files
-
8cd521e09ea24c264b561feaf21138da_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a1cf71d8aa0ba75eca4ec378bdfce7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
CloseServiceHandle
AdjustTokenPrivileges
LookupPrivilegeValueW
AddAce
LookupPrivilegeNameA
GetAce
SetSecurityInfo
OpenSCManagerW
QueryServiceConfigA
DuplicateToken
MapGenericMask
GetSecurityInfo
SetServiceObjectSecurity
SetKernelObjectSecurity
OpenProcessToken
QueryServiceStatus
RegEnumValueW
RegDeleteValueW
StartServiceA
comctl32
ImageList_GetIcon
ImageList_Remove
gdi32
CloseEnhMetaFile
CreateBrushIndirect
CreateCompatibleBitmap
CreateDCA
CreateSolidBrush
CreateDIBitmap
CopyEnhMetaFileA
EndDoc
DeleteObject
CreateRectRgnIndirect
CreatePen
CreateFontIndirectW
GetCurrentObject
ExtCreatePen
EndPage
EnumEnhMetaFile
CreateRoundRectRgn
GetCurrentPositionEx
CreatePatternBrush
EndPath
GetBrushOrgEx
GetMapMode
GetCharacterPlacementW
FillPath
GetClipBox
GetDIBColorTable
GdiFlush
ExtTextOutA
GetEnhMetaFileBits
GetDeviceCaps
GetObjectType
GetDCOrgEx
ExtFloodFill
GetOutlineTextMetricsA
GetRgnBox
GetNearestPaletteIndex
GetObjectA
PolyPolyline
GetTextCharacterExtra
GetTextAlign
GetPaletteEntries
GetTextColor
RoundRect
GetWindowOrgEx
StretchBlt
GetSystemPaletteEntries
SaveDC
GetTextExtentPointA
LineTo
SetBkMode
RectVisible
PlayEnhMetaFile
IntersectClipRect
RectInRegion
GetTextExtentExPointA
RealizePalette
SetViewportExtEx
SetDIBitsToDevice
GetTextExtentExPointW
SetROP2
SetMapMode
StartDocA
SelectClipRgn
SetPaletteEntries
SelectClipPath
SelectPalette
TextOutW
SetBkColor
SelectObject
StrokePath
SetTextAlign
msvcrt
?terminate@@YAXXZ
abort
exit
isalpha
atexit
difftime
memmove
realloc
fseek
srand
strlen
wcscat
time
strcmp
towupper
iswalpha
strncat
strrchr
wcscpy
sprintf
strncmp
_wcsnicmp
_stricmp
_ftol
_fileno
vswprintf
_adjust_fdiv
_strnicmp
_wtoi
__dllonexit
__setusermatherr
wcsncat
wcscmp
__p__environ
_wcslwr
_except_handler3
__p__commode
_iob
wsock32
WSAStartup
winspool.drv
DocumentPropertiesA
OpenPrinterA
imm32
ImmSetCompositionFontA
ImmGetCompositionStringA
Sections
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 52KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE