Static task
static1
Behavioral task
behavioral1
Sample
a578abe6bbda3a534eb3b88541c8759d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a578abe6bbda3a534eb3b88541c8759d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a578abe6bbda3a534eb3b88541c8759d_JaffaCakes118
-
Size
60KB
-
MD5
a578abe6bbda3a534eb3b88541c8759d
-
SHA1
027ef202256e1aeec9387ac8fc42aa627d157538
-
SHA256
50eddb400519f8d76865704b47c0d3ef82faae6a016221e2a71084d4079f23ec
-
SHA512
b85e067f144b52d0735b46561af7cc39d3737c364c308d561a8c3b967ce54d9fb3c37a35621e4e97d381ccb09726b2aa9e824e26b42dd3b6a3c87340716e620c
-
SSDEEP
768:6mPp/fDQGpgKTKF3slo5SqLr96gLZmjzYnP7RhRvx9oFqWGVYL4hp:6mpDZpgFkob4iKEFXvx9oFqWGVYL4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a578abe6bbda3a534eb3b88541c8759d_JaffaCakes118
Files
-
a578abe6bbda3a534eb3b88541c8759d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c92ce831d5f8523ec0834b2dc7254359
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
SetFilePointer
CreateFileA
CopyFileA
GetTempPathA
ReadFile
GetDriveTypeA
GetLogicalDriveStringsA
SetFileTime
GetFileTime
CloseHandle
WriteFile
DeleteFileA
GetSystemDirectoryA
CreateProcessA
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
ResumeThread
GetStringTypeA
LCMapStringW
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW
advapi32
OpenServiceA
QueryServiceStatus
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ