Static task
static1
Behavioral task
behavioral1
Sample
afb1b269de75e7dc8c5f8e91519d05fc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afb1b269de75e7dc8c5f8e91519d05fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afb1b269de75e7dc8c5f8e91519d05fc_JaffaCakes118
-
Size
128KB
-
MD5
afb1b269de75e7dc8c5f8e91519d05fc
-
SHA1
5f2d314974fa55b158695d09f1b953f4f18d6163
-
SHA256
d6c7c12eca9acabc86c8e60d5701545de0840cba3ba0dce256f4f831178d14cb
-
SHA512
7536b5ceffd41ef0b322eeb3992e3eea1c815bf1f7aa826473e7ed693322913f7e060868e2ec8e4b0226ffb02fd669a25c18f2f75757dba157d62ea6789ea7c6
-
SSDEEP
3072:40wK4ixx7DV3gKdGpCQef+jk0UzugBv+WWT:40bx7DVwBpa8x/gBv/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afb1b269de75e7dc8c5f8e91519d05fc_JaffaCakes118
Files
-
afb1b269de75e7dc8c5f8e91519d05fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
31303f05223411567206e2f742d3c81e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
SystemTimeToFileTime
LoadResource
FindResourceA
GetTickCount
GetTempPathA
FreeLibrary
LoadLibraryA
SetErrorMode
SetUnhandledExceptionFilter
SetFileTime
LocalFree
GetCommandLineW
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
SizeofResource
WriteFile
FreeResource
MoveFileA
SetFileAttributesA
DeleteFileA
ExitProcess
GetModuleFileNameA
CreateFileA
SetFilePointer
ReadFile
HeapFree
CloseHandle
SetLastError
lstrlenA
lstrcpyA
GetSystemDirectoryA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
Sleep
GetSystemTimeAsFileTime
user32
PostThreadMessageA
GetMessageA
wsprintfA
GetInputState
advapi32
GetAclInformation
RegCreateKeyExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
AddAce
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
CreateServiceA
RegSetValueExA
shell32
CommandLineToArgvW
msvcr71
_controlfp
_onexit
__dllonexit
realloc
malloc
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
wcstombs
strstr
strchr
__security_error_handler
??1type_info@@UAE@XZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
netapi32
NetUserGetLocalGroups
NetApiBufferFree
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ