Static task
static1
Behavioral task
behavioral1
Sample
aa8b24488bb981c0085a65cd0f95b6fd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aa8b24488bb981c0085a65cd0f95b6fd_JaffaCakes118
-
Size
85KB
-
MD5
aa8b24488bb981c0085a65cd0f95b6fd
-
SHA1
94963cd5fc0ad4461e2652b9c4b0184c564304a1
-
SHA256
d9504a313bbc7e8224655e1dcb231ef0e3358aeb2f3684de5f76b88f2786ae78
-
SHA512
8a8ce9f1101f95d54d05d0fadc007656e39a6d9d10db5694a22b7e81fb6e47f5f902c2568077d77d72e5b564860053e443f3572add06993f890993dc44db988e
-
SSDEEP
1536:6ySYG5H8FMCusi73NrNUbtcToXZ+TcxvJP8b3y3lakEFCOVWZH8:64cdrybe6Z+TcxvJ0Ly3MkEFCOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa8b24488bb981c0085a65cd0f95b6fd_JaffaCakes118
Files
-
aa8b24488bb981c0085a65cd0f95b6fd_JaffaCakes118.exe windows:5 windows x86 arch:x86
5ff29837cd8d876a5ccb4877e3326276
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyA
RegSetValueExW
RegDeleteKeyA
RegOpenKeyA
kernel32
WriteFile
SetFilePointer
CreateFileA
lstrcatA
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
GetFileAttributesA
MoveFileExA
lstrcmpA
GetLastError
WaitForSingleObject
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
CreateDirectoryA
MoveFileA
DeleteFileA
SetFileAttributesA
SetEnvironmentVariableA
GetSystemDirectoryA
GetCurrentDirectoryA
GetCommandLineA
lstrlenW
lstrcpynW
lstrcatW
lstrcpyW
lstrcmpiA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
ExitProcess
GetStdHandle
CloseHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
ReadFile
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
gdi32
TextOutA
user32
LoadKeyboardLayoutA
wsprintfA
ReleaseDC
wvsprintfA
GetDC
SystemParametersInfoA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uhuctss Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE