Static task
static1
Behavioral task
behavioral1
Sample
b904be9c7ff89f665be94f51dbe768af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b904be9c7ff89f665be94f51dbe768af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b904be9c7ff89f665be94f51dbe768af_JaffaCakes118
-
Size
10KB
-
MD5
b904be9c7ff89f665be94f51dbe768af
-
SHA1
0d25298326ced90d05574d1cb43b2d9b5050f19a
-
SHA256
911a524a5e7c00746a7c68b6aec123d0d02c736763279868bda9bba9b1e609db
-
SHA512
c0a55987a6584c4777eab629ca45cac726b5e10cfb363261cd08b87815b5b94c9ea7ebfe3d73fb087b38923ff027d56318967c27d5f84d00a60d45b427366470
-
SSDEEP
192:Ky/Y0qGt1a40aABmguRfof97neWKJ3BEvB3kuaGvkKr:KmYHugaRwf97nW3BEmED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b904be9c7ff89f665be94f51dbe768af_JaffaCakes118
Files
-
b904be9c7ff89f665be94f51dbe768af_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7172d277c63f2c68a37b921bd2700c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreatePipe
DuplicateHandle
GetProcessHeap
GetLastError
HeapAlloc
CloseHandle
lstrcatW
DeleteFileW
CopyFileW
FormatMessageW
LocalFree
GetFullPathNameW
GetExitCodeProcess
WaitForSingleObject
ExitProcess
Wow64RevertWow64FsRedirection
CreateProcessW
Wow64DisableWow64FsRedirection
GetCurrentProcess
IsWow64Process
HeapFree
GetModuleHandleW
user32
PostQuitMessage
DefWindowProcW
DialogBoxParamW
EnableWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
TranslateMessage
UpdateWindow
EndDialog
GetMessageW
MessageBoxW
DispatchMessageW
advapi32
QueryServiceConfigW
OpenServiceW
QueryServiceStatus
CreateServiceW
StartServiceW
CloseServiceHandle
DeleteService
ControlService
OpenSCManagerW
shell32
SHGetFolderPathW
msvcr80
strstr
memcpy
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ