Static task
static1
Behavioral task
behavioral1
Sample
969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118
-
Size
40KB
-
MD5
969c3ca42cc80eab913d19e9d06a356a
-
SHA1
56cd63bc1e50d0f5074ed8cc9f25c2c165a72a66
-
SHA256
ea17d008281947bbb79f6bae3dddec832ad05fdfdb645ab22d6dfa32368f421a
-
SHA512
08a7c80fa5d67f50336ba7dfb448c73b4b4b689c83d995b3d1db30e0280e3028a18fcff36d4154716e440e9eec85fb79462243da9522b2d6695b0944572869bb
-
SSDEEP
768:MV+v6/tdnSNxpZwHA30RmU4lS9sb75Rlk/Hg9MuT8N3UDr3pyp9:qpFdnSNHZAqUIdA+MuTFbkp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118
Files
-
969c3ca42cc80eab913d19e9d06a356a_JaffaCakes118.exe windows:4 windows x86 arch:x86
fad5c23e9f3885fffb5881203d7140ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
ReadProcessMemory
GetThreadContext
TerminateProcess
SetThreadContext
WriteProcessMemory
FreeLibrary
VirtualFree
GetStartupInfoA
VirtualAlloc
GetModuleHandleA
LoadLibraryA
GetProcAddress
CopyFileA
GetLastError
lstrlenA
Sleep
GetTickCount
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
GetSystemDirectoryA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetTempPathA
WinExec
CreateFileA
WriteFile
CloseHandle
VirtualProtectEx
user32
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegCloseKey
msvcrt
_XcptFilter
rand
__CxxFrameHandler
exit
strftime
localtime
time
strncmp
_except_handler3
strchr
strncat
memmove
_exit
_strnicmp
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Sections
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE