Static task
static1
Behavioral task
behavioral1
Sample
b97789674db15cd039a7149b6aca8dae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b97789674db15cd039a7149b6aca8dae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b97789674db15cd039a7149b6aca8dae_JaffaCakes118
-
Size
176KB
-
MD5
b97789674db15cd039a7149b6aca8dae
-
SHA1
b04344391c8d77ca7e7915e6e96b618836c4809e
-
SHA256
df3d2f38704a671c4113acb5a8bfdc208ac7a9cb4c756e33ed800e30b15d3360
-
SHA512
393f03e458e2b4fa10cdf5ee3b84f804840c702d646d04fde3be0e7a35ccb96a708a3745f9f9e5ddff638e15b2cb5a367705e5e28cb18f857b972821cfcb83c4
-
SSDEEP
3072:ylqVXHmf21MNY0VNoZs8mcBbdNIPOyYeWJIJrhYVzDGw1+3GQomYqpbkHqPxL9//:yWcrVNis78ZNIP+irhCzDH1+WKYqpbqU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97789674db15cd039a7149b6aca8dae_JaffaCakes118
Files
-
b97789674db15cd039a7149b6aca8dae_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fb2090c2e2e16226f01331e9821b2ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
ole32
CoCreateGuid
CoInitialize
CoCreateInstance
advapi32
CryptAcquireContextA
CryptGenRandom
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
OpenSCManagerA
CryptReleaseContext
RegCloseKey
rpcrt4
UuidToStringA
shlwapi
StrStrIA
SHSetValueA
SHGetValueA
SHEnumKeyExA
SHEnumValueA
user32
wsprintfA
msvcrt
strlen
fwrite
fclose
fopen
ispunct
printf
isgraph
isalnum
isalpha
wctomb
__mb_cur_max
strerror
islower
tolower
isxdigit
strncpy
rand
wcscpy
mbstowcs
sprintf
srand
atoi
strcat
strcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
isupper
isspace
time
memset
malloc
memcpy
memcmp
free
??2@YAPAXI@Z
imagehlp
ImageNtHeader
kernel32
GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
GetModuleHandleA
FindNextFileA
WideCharToMultiByte
GetFileAttributesExA
SetFileTime
lstrlenA
GetSystemDirectoryA
GetLocalTime
GetVersionExA
ExitProcess
CreateFileA
CloseHandle
GetLastError
GetStartupInfoA
SleepEx
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE