Static task
static1
Behavioral task
behavioral1
Sample
b22f2429f1228a4f5a5059eb7eccdfad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b22f2429f1228a4f5a5059eb7eccdfad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b22f2429f1228a4f5a5059eb7eccdfad_JaffaCakes118
-
Size
105KB
-
MD5
b22f2429f1228a4f5a5059eb7eccdfad
-
SHA1
49d04b409f1ddbce2d498059fc7859c7d481f904
-
SHA256
b02a75bd826c0587b05ac2945f7065e2fb799fcc2cb6a72d9cc7ab8b366583ff
-
SHA512
b663d12b3365ec5ce06c5502fa5a5bad96b9d2abc0d8bafff0f2f0c7d72cfa10e54fbfd7754f9ada2bacbff4c615995c0720813a480fc79d258393cb317eb0a7
-
SSDEEP
3072:V/gRMbya2MFrjKhtOj6/7/JyhGJs1tBQ2:VIRJaZ6htYm09S2
Malware Config
Signatures
Files
-
b22f2429f1228a4f5a5059eb7eccdfad_JaffaCakes118.exe windows:4 windows x86 arch:x86
632a36082eb3bccfc57ff488fbb1589c
Code Sign
05:eb:b4:8b:52:1e:e4:71:bc:5e:c5:cd:9b:76:27:54Certificate
IssuerCN=Root AgencyNot Before23/02/2011, 11:36Not After31/12/2039, 23:59SubjectCN=MineFilter 인증서Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetCurrentProcessId
GetCurrentThreadId
MoveFileA
WriteFile
CreateFileA
GetShortPathNameA
CreateProcessA
GetVersionExA
GetProcAddress
GetModuleHandleA
ResetEvent
GetFileAttributesExA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetFilePointer
CreateDirectoryA
GetLocalTime
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
ExpandEnvironmentStringsA
LoadLibraryExA
GetPrivateProfileIntA
CopyFileA
DeleteFileA
FreeLibrary
CloseHandle
GetPrivateProfileStringA
Sleep
lstrcatA
GetTickCount
GetLastError
SetEvent
lstrcpyA
GetModuleFileNameA
lstrcmpiA
CreateEventA
CreateThread
WaitForSingleObject
lstrlenA
TerminateThread
GetTempPathA
SetStdHandle
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapSize
WideCharToMultiByte
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FlushFileBuffers
user32
wvsprintfA
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
StartServiceCtrlDispatcherA
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
shell32
SHGetFileInfoA
ShellExecuteA
wininet
InternetReadFile
HttpQueryInfoA
InternetSetOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shlwapi
SHDeleteKeyA
SHDeleteValueA
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ