Static task
static1
Behavioral task
behavioral1
Sample
b72db4545857152305c999fb36a114b3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b72db4545857152305c999fb36a114b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b72db4545857152305c999fb36a114b3_JaffaCakes118
-
Size
12.2MB
-
MD5
b72db4545857152305c999fb36a114b3
-
SHA1
73994a7f24f160fe6bcbe1196216153a7a6eb40b
-
SHA256
14f873bb4aa84aeec9a7d4d351a0ef5a28ada9885dfea43db7d20504a8d052c5
-
SHA512
4f27750b30a26f32501cd20e80c17c235479644c1767d7db15b050830486ff8dc0c7778a77c1831b11371a0b8628b9212489bc72216a6f13f31fcf65aebc1662
-
SSDEEP
3072:ZUYsFlYXTGHsRW5WNqN90WFAfjg+vFCzTP8yTQfV4CfRD1UCPmvMF:ZnsFlYXTGHswlnF+fj3FCzT0yTKLLPmE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72db4545857152305c999fb36a114b3_JaffaCakes118
Files
-
b72db4545857152305c999fb36a114b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
71e85abf70c32ac971c0363e04ad6796
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
MakeSureDirectoryPathExists
kernel32
GetModuleHandleA
GetCommandLineA
SetUnhandledExceptionFilter
WritePrivateProfileStringA
SetFilePointer
Sleep
GetLastError
DeleteFileA
SetLastError
lstrcpyA
GlobalAlloc
LocalFileTimeToFileTime
SetFileTime
lstrlenA
FreeLibrary
GetCurrentProcess
Process32Next
ExitProcess
CreateFileA
WriteFile
CloseHandle
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetStartupInfoA
advapi32
RegRestoreKeyA
RegOpenKeyA
QueryServiceStatus
StartServiceA
CloseServiceHandle
LockServiceDatabase
ChangeServiceConfigA
UnlockServiceDatabase
OpenServiceA
ControlService
OpenSCManagerA
RegSaveKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
FreeSid
RegCloseKey
RegSetKeySecurity
SetSecurityDescriptorDacl
user32
BlockInput
IsCharAlphaNumericA
msvcrt
_strcmpi
realloc
malloc
_except_handler3
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
rand
srand
time
__CxxFrameHandler
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ