Static task
static1
Behavioral task
behavioral1
Sample
96a0cc0b5b0444279b14c2f72d8826dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96a0cc0b5b0444279b14c2f72d8826dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96a0cc0b5b0444279b14c2f72d8826dd_JaffaCakes118
-
Size
33KB
-
MD5
96a0cc0b5b0444279b14c2f72d8826dd
-
SHA1
908fd9020ab2c1760ad23d9e07ec5bfd36379e50
-
SHA256
935fa52c0e3558045ac708d12cb715cc8b96492cbdb3716b44042a33e829e5a6
-
SHA512
a4ce364fb018c487fbc92fa18d2c9207437257c3be3b892c838d02a26df3639f1f865dce8fe070c13143cce8bb5b714ebb31d9feac987c01298d515c24e528cc
-
SSDEEP
384:vLEMdwcYAVq1jCwm9fZq8qON8DllfoAUQRJn7YYD+KGoU:zEkVq1jCXfZqEN8bfoHQn7Y7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a0cc0b5b0444279b14c2f72d8826dd_JaffaCakes118
Files
-
96a0cc0b5b0444279b14c2f72d8826dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
90db7df577bf81ca7ed3b3679a3e5374
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
ChangeServiceConfig2A
CloseServiceHandle
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateThread
CreateToolhelp32Snapshot
ExitProcess
ExitThread
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
OpenProcess
Process32First
Process32Next
SetUnhandledExceptionFilter
Sleep
TerminateProcess
VirtualProtect
VirtualQuery
WaitForSingleObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fopen
fread
free
fwrite
malloc
memcpy
memset
signal
strcmp
strlen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 416B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 32B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 512B - Virtual size: 171B
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 1024B - Virtual size: 642B
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 512B - Virtual size: 443B
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 512B - Virtual size: 116B
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 512B - Virtual size: 397B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_DISCARDABLE