Static task
static1
Behavioral task
behavioral1
Sample
b83a9c3e1ab0b98957162f7f33379e1b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b83a9c3e1ab0b98957162f7f33379e1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b83a9c3e1ab0b98957162f7f33379e1b_JaffaCakes118
-
Size
24KB
-
MD5
b83a9c3e1ab0b98957162f7f33379e1b
-
SHA1
0d2c5c8ec241aac5b3d5f82a6257b90550720374
-
SHA256
92429dbb4b9eba438c7ab8e83cde52c7e08a6c681103b8a5ef20a17b765e5a63
-
SHA512
f5f635cfec0032f9a22d39e44e2ba8b0fae8a74c12ff64b29f3ae312397752b9299c58c9194767eadc39d0e92e7c2904b1d6bb6bb112dd46bf3ad9ce779328a8
-
SSDEEP
384:gF+bLJ11KKEQWLW3wzwzm1DrrSVl6w/B:Etye9rI6w/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b83a9c3e1ab0b98957162f7f33379e1b_JaffaCakes118
Files
-
b83a9c3e1ab0b98957162f7f33379e1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
0291f617074175ddba1743c813e1f638
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadContext
LocalFree
FormatMessageA
GetDateFormatA
GetTimeFormatA
WriteFile
SetFilePointer
CreateFileW
IsBadReadPtr
GetModuleFileNameA
VirtualQuery
SetUnhandledExceptionFilter
ExitProcess
HeapValidate
VirtualAllocEx
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleHandleW
Sleep
lstrlenA
GetCommandLineW
lstrcmpiW
lstrcpyW
WriteProcessMemory
SetThreadContext
OpenProcess
ReadProcessMemory
OpenThread
GetThreadPriority
SetThreadPriority
SuspendThread
ResumeThread
CloseHandle
GetProcAddress
SetLastError
GetLastError
HeapCreate
GetCurrentProcess
user32
GetWindowThreadProcessId
wsprintfA
wvsprintfA
EnumWindows
advapi32
CreateServiceA
CloseServiceHandle
SetServiceStatus
RegisterServiceCtrlHandlerA
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetTokenInformation
DeleteService
QueryServiceStatus
ControlService
OpenServiceA
StartServiceCtrlDispatcherA
OpenSCManagerA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1000B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ