Static task
static1
Behavioral task
behavioral1
Sample
a76d9ddd94b5679a31c61c3ede7fa421_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a76d9ddd94b5679a31c61c3ede7fa421_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a76d9ddd94b5679a31c61c3ede7fa421_JaffaCakes118
-
Size
30KB
-
MD5
a76d9ddd94b5679a31c61c3ede7fa421
-
SHA1
184d6ddd0cede6e824964ee4246b2c2596b08e9b
-
SHA256
41b611c10f400db371347ff7eab7f24b630db309c1dd634e5b41f7e18b40fd60
-
SHA512
c1443c0173586749876cdd5c1cfd80c794c302c1607f605555f7eb516058db44ffa1b0ce73d9d48d9016e00410d3d464a61274f3d416b960a9301a7ffcb3e4df
-
SSDEEP
384:5/rBrLKMpulPG88GVrF69QXwwDCSn1xPWYQ7k6rD4Xg7aTvcd3U1+ZTqDxnb5u0M:/LKMpusnGNFjNCS1d5ak6qQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a76d9ddd94b5679a31c61c3ede7fa421_JaffaCakes118
Files
-
a76d9ddd94b5679a31c61c3ede7fa421_JaffaCakes118.exe windows:5 windows x86 arch:x86
f07a9e50e4d00f09a736c0dd3fbe78fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_controlfp
_XcptFilter
_exit
_c_exit
wcsncmp
wcscmp
_getche
_wtol
wcscpy
_wcsicmp
wcslen
printf
_except_handler3
_cexit
advapi32
ChangeServiceConfig2W
OpenSCManagerW
StartServiceW
QueryServiceStatusEx
DeleteService
NotifyBootConfigStatus
GetServiceDisplayNameW
GetServiceKeyNameW
EnumServicesStatusW
EnumServiceGroupW
EnumServicesStatusExW
QueryServiceStatus
LockServiceDatabase
UnlockServiceDatabase
QueryServiceLockStatusW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetServiceObjectSecurity
QueryServiceObjectSecurity
ConvertSecurityDescriptorToStringSecurityDescriptorW
EnumDependentServicesW
CreateServiceW
CloseServiceHandle
ChangeServiceConfigW
ControlService
QueryServiceConfig2W
QueryServiceConfigW
OpenServiceW
kernel32
LocalFree
LocalAlloc
GetLastError
FormatMessageW
GetModuleHandleA
ntdll
RtlAdjustPrivilege
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE