Static task
static1
Behavioral task
behavioral1
Sample
a492aab9b0508bd31231be1e5194d4d0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a492aab9b0508bd31231be1e5194d4d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a492aab9b0508bd31231be1e5194d4d0_JaffaCakes118
-
Size
137KB
-
MD5
a492aab9b0508bd31231be1e5194d4d0
-
SHA1
a141ada3378d2385d322462ecd9cae97fa2c21d6
-
SHA256
4ae81ef5dc1f91a1d5c8df94adaf47f773ffc27b307c9cfd846ea910d5a7fe25
-
SHA512
70a4b1c5ccc14855d581f90e6392028d2c217d28431ce34ce31563570442d00178ceefac194054ed8428726cb1892f8e2ababcc7196bac5e0976c12e307a5009
-
SSDEEP
3072:1pg6az8jKHONUaf4DZovirxSvtCNoGhHz86m:1pg6az8j4gN0Z4eSl6J5zI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a492aab9b0508bd31231be1e5194d4d0_JaffaCakes118
Files
-
a492aab9b0508bd31231be1e5194d4d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
86681e5d5647652835644011f5a942cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetStartupInfoA
CreateDirectoryA
GetModuleHandleA
CreateThread
GetTempPathA
SetFilePointer
ReadFile
FreeLibrary
LoadLibraryA
GetProcAddress
lstrcatA
GetLastError
SetLastError
lstrcmpiA
lstrcpyA
FindResourceA
LoadResource
GetWindowsDirectoryA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
lstrlenA
MultiByteToWideChar
Sleep
ExitProcess
user32
SendMessageA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
wsprintfA
advapi32
StartServiceA
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
RegSetValueExA
InitializeSecurityDescriptor
GetFileSecurityA
LookupAccountNameA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
GetSecurityDescriptorDacl
msvcrt
??1type_info@@UAE@XZ
_strnset
_strrev
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
strtok
??2@YAPAXI@Z
strchr
__CxxFrameHandler
??3@YAXPAX@Z
_except_handler3
strstr
realloc
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
Sections
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Hexpor Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE