Static task
static1
Behavioral task
behavioral1
Sample
bcc4652f4d6c46e16b67b4f87b9399ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcc4652f4d6c46e16b67b4f87b9399ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcc4652f4d6c46e16b67b4f87b9399ce_JaffaCakes118
-
Size
60KB
-
MD5
bcc4652f4d6c46e16b67b4f87b9399ce
-
SHA1
657012cc5a5f2f5552f46ba730a918db585d5749
-
SHA256
a471a45d71667721cb51f239c5b6a536ff67ad216ddc414100481d022a4ccf39
-
SHA512
1fbf09c5388b15deadc7432d15a1d53f0579f7b35f64b0d3c0e1e8be058446c1bc7951c90f6a70ae2cc59ed6559b8f4a6458b2436e9796567a4af0495769248f
-
SSDEEP
768:jATCxY1PIpDLoNl++hr9QSCZM36g0uaTIjomxoCf:0cYydUNd9fwMzaT6om6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcc4652f4d6c46e16b67b4f87b9399ce_JaffaCakes118
Files
-
bcc4652f4d6c46e16b67b4f87b9399ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc4c1455475dd1605bec2a1f0fe8e497
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetWindowsDirectoryA
GlobalFindAtomA
WinExec
GetTickCount
CloseHandle
WriteFile
CreateFileA
SetEndOfFile
SetFilePointer
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
Thread32First
GetModuleHandleA
DuplicateHandle
OpenProcess
DeviceIoControl
GetLastError
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
DeleteFileA
GetSystemDirectoryA
lstrlenA
lstrcpyA
CreateThread
lstrcmpiA
lstrcatA
LoadLibraryA
SetFileAttributesA
GetProcAddress
Sleep
GetCurrentProcess
Thread32Next
TerminateProcess
user32
wsprintfA
advapi32
CreateServiceA
CloseServiceHandle
StartServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
mfc42
ord823
ord825
msvcrt
strrchr
rand
srand
_strlwr
strcmp
msvcirt
??6ostream@@QAEAAV0@PBD@Z
?cout@@3Vostream_withassign@@A
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE