Static task
static1
Behavioral task
behavioral1
Sample
a56c7db1f73472e87bf2a497e194538d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a56c7db1f73472e87bf2a497e194538d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a56c7db1f73472e87bf2a497e194538d_JaffaCakes118
-
Size
152KB
-
MD5
a56c7db1f73472e87bf2a497e194538d
-
SHA1
0f5c1685f34370a73397b7f1da8250eade9f2286
-
SHA256
29ed41af3679cbe04573fd33160ead43e87383d8e5dfefc36ec44db247157ddf
-
SHA512
57b93e9e4c6dd2a1f7f56dd6d92fbfe7895f877ef2bc77ef9aa5febe5276eed8e96fd60114bfe670caea6dead130e44c9876a0746ec65f1e4d833955f1405d9b
-
SSDEEP
3072:G7xjanesItpCkNtg4jz21PjlMR1ft37CVov:GlaebIuz21xMjlLCVov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a56c7db1f73472e87bf2a497e194538d_JaffaCakes118
Files
-
a56c7db1f73472e87bf2a497e194538d_JaffaCakes118.exe windows:4 windows x86 arch:x86
4818643effcd7af6875f3e6f6198adc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
Sleep
GetVersionExA
WinExec
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
CreateFileA
WriteFile
OpenProcess
GetCurrentProcess
DuplicateHandle
GetProcAddress
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
CloseHandle
LoadLibraryA
user32
CreateWindowExA
DefWindowProcA
GetMessageA
ShowWindow
PostQuitMessage
TranslateMessage
RegisterClassExA
DispatchMessageA
GetDesktopWindow
advapi32
GetUserNameA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CloseServiceHandle
ConvertSidToStringSidA
LookupAccountNameA
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
RegOpenKeyExA
msvcrt
__getmainargs
_controlfp
__set_app_type
__p__fmode
rand
sprintf
fclose
fflush
fwrite
fopen
_access
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
srand
time
_exit
_XcptFilter
exit
_acmdln
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHSetValueA
SHDeleteKeyA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ