Static task
static1
Behavioral task
behavioral1
Sample
a8a04beab915a9474f1ea32da210085f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a8a04beab915a9474f1ea32da210085f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8a04beab915a9474f1ea32da210085f_JaffaCakes118
-
Size
5KB
-
MD5
a8a04beab915a9474f1ea32da210085f
-
SHA1
05808053e402a0f6e7b621e48a33af8d5811848f
-
SHA256
1c60f093315a6feac4cac98cfafac83dbe481f119cb90acb6d1aae0830d9b492
-
SHA512
cab60c81cb8f4433d11b27faff8b05716c7ed554d8c9e61ed1df746ea03ccb791ec976f091db708a2e79dda30f47d4972ff12cf8f349b295bd97b0f4b1b6d200
-
SSDEEP
96:nPyOF2oKxKKZFu4lJy1L36OWUPuCH+a+:nKc2JxKKfuiQ3CUPuCel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8a04beab915a9474f1ea32da210085f_JaffaCakes118
Files
-
a8a04beab915a9474f1ea32da210085f_JaffaCakes118.exe windows:4 windows x86 arch:x86
882574f77ce2038908107516d2960fdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
CloseServiceHandle
ControlService
StartServiceA
CreateServiceA
OpenServiceA
OpenSCManagerA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
kernel32
lstrlenA
lstrcpyA
lstrcatA
lstrcmpiA
ExitProcess
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetShortPathNameA
GetModuleFileNameA
CloseHandle
GetFileSize
SetFilePointer
ReadFile
WriteFile
CreateFileA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ