Static task
static1
Behavioral task
behavioral1
Sample
af812748609cb42f75282f0a77da6144_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af812748609cb42f75282f0a77da6144_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af812748609cb42f75282f0a77da6144_JaffaCakes118
-
Size
97KB
-
MD5
af812748609cb42f75282f0a77da6144
-
SHA1
08eb3eca536f8e2f03e8e50aba095e66d3dafa07
-
SHA256
70333e695d2136e70b3cc3fc83437add912b7db5d0f0a3c188bc6d45cf29b35b
-
SHA512
dd2b57ec303d7f40e3eea74ab2b4d34230763c10af0f4a20eded4bbdab4bfd4b6090e6b379d596e94917d92dc98e14217f61ccc3852c134ddcafcc8c5cf9c88c
-
SSDEEP
1536:/kibYNPi7PlFJmmCsROWZ4eFAxmucQKbyiUDFekH4+tSx:cidImDFbE94fx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af812748609cb42f75282f0a77da6144_JaffaCakes118
Files
-
af812748609cb42f75282f0a77da6144_JaffaCakes118.exe windows:4 windows x86 arch:x86
960cd6bc30129f445957548004ea9c00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CloseHandle
SetFileTime
GetFileAttributesExA
DuplicateHandle
GetCurrentProcess
OpenProcess
WriteFile
LoadLibraryA
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetProcAddress
WinExec
GetLastError
GetSystemDirectoryA
Sleep
CreateFileA
user32
CreateWindowExA
DefWindowProcA
PostQuitMessage
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
RegisterClassExA
ShowWindow
advapi32
ConvertSidToStringSidA
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
LookupAccountNameA
GetUserNameA
OpenSCManagerA
DeleteService
RegCloseKey
shlwapi
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
_access
fclose
fflush
fwrite
fopen
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
time
_except_handler3
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ