Static task
static1
Behavioral task
behavioral1
Sample
b95eb5947794ce4968405b7c95606785_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b95eb5947794ce4968405b7c95606785_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b95eb5947794ce4968405b7c95606785_JaffaCakes118
-
Size
192KB
-
MD5
b95eb5947794ce4968405b7c95606785
-
SHA1
29d1a8b298c38d51a8b9b8eb5884294d5aaf63df
-
SHA256
f350f1342f4d98a6b039c68924727f1a96c2300e406bcd1869326724c8d4df2f
-
SHA512
439c46cc8aa409c187d6fe9d9f710fbd7db3d50b69e16ef9cc8b60be123a936b750f29a349df1c71955282ab5eb59988de123b6eec4773b65d35a27cd9d95c56
-
SSDEEP
3072:5dZfWaNKVfnmF2tnYA0PMeDwKjBegUz6Y82NGScey4K6SPqatVK2SCc:5dZfWaNw/FYtPMCwKjB9cNHZVyJ61cKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95eb5947794ce4968405b7c95606785_JaffaCakes118
Files
-
b95eb5947794ce4968405b7c95606785_JaffaCakes118.exe windows:4 windows x86 arch:x86
88576909b4350a8ef3a1146ad93adc33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidToStringA
ole32
CoCreateGuid
CoCreateInstance
CoInitialize
advapi32
OpenSCManagerA
DeleteService
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegSetValueExA
RegCreateKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
RegOpenKeyExA
shlwapi
SHEnumKeyExA
SHEnumValueA
StrStrIA
SHGetValueA
SHSetValueA
shell32
SHGetSpecialFolderPathA
user32
wsprintfA
msvcrt
isupper
strerror
tolower
isalnum
printf
ispunct
isgraph
isalpha
??2@YAPAXI@Z
strcat
strcpy
free
memset
islower
atoi
strncpy
rand
wcscpy
mbstowcs
srand
time
memcmp
isspace
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__mb_cur_max
malloc
wctomb
sprintf
strlen
fopen
fwrite
fclose
memcpy
isxdigit
imagehlp
ImageNtHeader
kernel32
GetModuleHandleA
GetFileAttributesExA
SetFileTime
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
WideCharToMultiByte
GetLastError
CreateFileA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
lstrlenA
GetSystemDirectoryA
GetStartupInfoA
CloseHandle
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE