Static task
static1
Behavioral task
behavioral1
Sample
b44f93312de75c35f589a130c3893a74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b44f93312de75c35f589a130c3893a74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b44f93312de75c35f589a130c3893a74_JaffaCakes118
-
Size
169KB
-
MD5
b44f93312de75c35f589a130c3893a74
-
SHA1
f044fcb5c267cec89aed3d55fd265e0717d57f6a
-
SHA256
eaceee0d415309597ffa0269458ef03811238909df18bd5b077c2e3eea1c956b
-
SHA512
3bac63c8c47b5b2dc50cf6c566780183dc49a62182bf434d3dbb7a0fdc4b5b35d264342c4c3da6332994c523a1a6afb325136fe3bc3f80f092868ef71129a2b2
-
SSDEEP
3072:dxghRA06C+fjVd9hANnNIAsOTTl80sVbcv6lD5v6rQho2QagK4+vYC1P8rSY8XRk:TwL6C+LVXhAnIAUTbcv8y5XgZvxErV4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b44f93312de75c35f589a130c3893a74_JaffaCakes118
Files
-
b44f93312de75c35f589a130c3893a74_JaffaCakes118.exe windows:4 windows x86 arch:x86
16e0bd49336c6c7abe1aea93c9e11e29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
ChangeServiceConfig2A
ControlService
GetSecurityDescriptorControl
GetUserNameA
LockServiceDatabase
LookupAccountSidA
LookupPrivilegeValueA
QueryServiceConfig2A
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
StartServiceA
kernel32
CloseHandle
CompareStringA
CopyFileA
CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
EnumSystemLocalesA
ExitProcess
FileTimeToLocalFileTime
FindFirstFileA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
GetACP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetDateFormatA
GetEnvironmentStringsA
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileTime
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleHandleA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetSystemDirectoryA
GetTempPathA
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeFormatA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
IsBadCodePtr
IsDebuggerPresent
LockResource
MapViewOfFile
Module32Next
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
ResumeThread
SetPriorityClass
TlsFree
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WriteConsoleA
WritePrivateProfileStringA
lstrcatA
ole32
CoGetClassObject
CoTaskMemFree
OleRegEnumVerbs
OleRegGetMiscStatus
user32
BeginPaint
CharLowerA
CharNextA
CharPrevA
DestroyWindow
DialogBoxParamA
DrawIcon
EnableWindow
EndPaint
FillRect
FindWindowA
GetActiveWindow
GetClassNameA
GetDlgCtrlID
GetDlgItemTextA
GetFocus
GetWindowRect
InflateRect
LoadIconA
LoadImageA
MapWindowPoints
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
SendDlgItemMessageA
SendMessageA
SetRect
SetWindowLongA
SetWindowPos
TranslateMessage
UnregisterClassA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ