Static task
static1
Behavioral task
behavioral1
Sample
ab45c1188926fcfc685e9b2a97717e2f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab45c1188926fcfc685e9b2a97717e2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab45c1188926fcfc685e9b2a97717e2f_JaffaCakes118
-
Size
152KB
-
MD5
ab45c1188926fcfc685e9b2a97717e2f
-
SHA1
999ac5f3eda893f075bb8ac21676f3e4ac18503e
-
SHA256
643c0383ec10f99b94c3db46ce68e09d3a78279ab60e349c416ebec0bfdbcbfe
-
SHA512
223d5dca3954116a83e31988d9b74b598213d2e39276c038353a74bb951ee3de8a547ab685115f6d0109c0fab8bd33555c6b8b18ee531f8da16ea9d44499ee1a
-
SSDEEP
1536:P/F28EsWX0wbZziN4JcdSEMAkrTNKx018kYNxroIunAoWNdrB+XK/kfOdkQ:HFWbZziW4vxs83lbrUrWdkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab45c1188926fcfc685e9b2a97717e2f_JaffaCakes118
Files
-
ab45c1188926fcfc685e9b2a97717e2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae879ca1a95f405cb7c89d32ce62d1f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
SetFileTime
GetFileAttributesExA
GetModuleFileNameA
DuplicateHandle
GetCurrentProcess
GetStartupInfoA
GetModuleHandleA
Sleep
WinExec
GetVersionExA
CreateFileA
LoadLibraryA
GetProcAddress
CloseHandle
GetLastError
GetSystemDirectoryA
WriteFile
user32
GetDesktopWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
DefWindowProcA
PostQuitMessage
RegisterClassExA
DispatchMessageA
advapi32
RegOpenKeyExA
OpenServiceA
DeleteService
OpenSCManagerA
CloseServiceHandle
RegCloseKey
RegQueryValueExA
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
CreateServiceA
StartServiceA
shlwapi
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
rand
fclose
fflush
fwrite
fopen
_except_handler3
srand
time
_access
??3@YAXPAX@Z
??2@YAPAXI@Z
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ