Static task
static1
Behavioral task
behavioral1
Sample
b9799942c721c87744a7f4d7481c75df_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9799942c721c87744a7f4d7481c75df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9799942c721c87744a7f4d7481c75df_JaffaCakes118
-
Size
17KB
-
MD5
b9799942c721c87744a7f4d7481c75df
-
SHA1
b66e5fe4c74d8c6a4f2486b8bff2427b712de79d
-
SHA256
0087627832eef0a795db9273f86e4285747538289031df518723df745296488b
-
SHA512
3db6e9740b14a1b16cbd4a10f3691a46f7461df3d86dc71ab58758648481073fd3e5902201acd985adaf9eb9e3ed3f8b0276d6d91e746ff1c4c8952f44a2860a
-
SSDEEP
384:4MliHCjCsT7ejol4ePCbYWGJViYzDT6kwSQc6u8kEFr4LioEATa0np+cS:5d6jHeemJDivk/rTaU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9799942c721c87744a7f4d7481c75df_JaffaCakes118
Files
-
b9799942c721c87744a7f4d7481c75df_JaffaCakes118.exe windows:4 windows x86 arch:x86
defa7a963fc3c1bb2bc388883ea72145
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
psapi
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
kernel32
WinExec
lstrcatA
lstrcpyA
DeleteFileA
MoveFileExA
GetTempFileNameA
GetSystemDirectoryA
CreateProcessA
CloseHandle
Sleep
lstrlenA
CreateFileA
lstrcmpiA
GetProcAddress
LoadLibraryA
OpenProcess
GetProcessHeap
GetModuleHandleA
HeapFree
HeapAlloc
ReadFile
GetFileSizeEx
GetTickCount
GetSystemWindowsDirectoryA
WriteFile
WaitForSingleObject
ResumeThread
RemoveDirectoryA
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetDriveTypeA
SetThreadContext
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
GetThreadContext
GetModuleFileNameA
DuplicateHandle
ExitProcess
GetLastError
GetCurrentProcess
GetFileSize
advapi32
CryptEncrypt
CryptImportKey
CryptAcquireContextA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
shell32
ShellExecuteA
SHGetFolderPathA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ