Static task
static1
Behavioral task
behavioral1
Sample
be32cfca940eae5dfe8d1d71e4b89c9d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be32cfca940eae5dfe8d1d71e4b89c9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be32cfca940eae5dfe8d1d71e4b89c9d_JaffaCakes118
-
Size
124KB
-
MD5
be32cfca940eae5dfe8d1d71e4b89c9d
-
SHA1
57db1d129ce73df04b375b076ccb4ab073c0ce0c
-
SHA256
65be3964aa26573c83b0f275694cf12fd19940d9ce0ae3fbb1a0c3eb11d49679
-
SHA512
08d31e29022fad5e41164042f0d390bf5b715423b6d4e50468b70945d0f7ae884fd9e93cbe33f3d194e045dde28fa6d9dd588ae2ba5639be38bf3d964871cc66
-
SSDEEP
3072:LiGV6p0qm1L5e8craM7i03KX6p7sYSbIKCfHRHU:LiGV6p0qm15eOM7h77xnbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be32cfca940eae5dfe8d1d71e4b89c9d_JaffaCakes118
Files
-
be32cfca940eae5dfe8d1d71e4b89c9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
07db17c06be1a5e346337a863a930f0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetFilePointer
CreateThread
GetModuleHandleA
CreateDirectoryA
SetUnhandledExceptionFilter
ReleaseMutex
GetTempPathA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
MoveFileA
CopyFileA
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
SetLastError
lstrcmpiA
GetWindowsDirectoryA
lstrcpyA
FindResourceA
LoadResource
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
lstrlenA
MultiByteToWideChar
Sleep
ExitProcess
CreateMutexA
user32
SendMessageA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
LoadIconA
LoadCursorA
wsprintfA
CreateWindowExA
RegisterClassExA
advapi32
CloseServiceHandle
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
OpenSCManagerA
CreateServiceA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
LookupAccountNameA
StartServiceA
OpenServiceA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
GetFileSecurityA
msvcrt
_exit
_strnset
_strrev
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strtok
??2@YAPAXI@Z
strchr
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
realloc
malloc
strstr
??1type_info@@UAE@XZ
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
Sections
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ