Static task
static1
Behavioral task
behavioral1
Sample
beda5a5913115a0d3b5b2bf65a1c80bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
beda5a5913115a0d3b5b2bf65a1c80bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
beda5a5913115a0d3b5b2bf65a1c80bc_JaffaCakes118
-
Size
113KB
-
MD5
beda5a5913115a0d3b5b2bf65a1c80bc
-
SHA1
832712c06c52b7ac58207078966f1ab127eb9909
-
SHA256
98f9bca736c4809c0e9df22db5cf3de94a77c537e779adf178295450d6df6cad
-
SHA512
bdda6ec98e2ed8aee8727610a4e78f1f4fde1df6f7eaf094b07d3f7a41907fa7fba5663a7b7b2ce28735d958eb5ec88b1db860d6c2df988973c9466789664bc7
-
SSDEEP
3072:Xk4aCg6a4QmuQQZ4yLafFGt2LoJWr6RU7NZe8cexAin/:Xk4aR6aJdhS5ry0NLcexAi/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beda5a5913115a0d3b5b2bf65a1c80bc_JaffaCakes118
Files
-
beda5a5913115a0d3b5b2bf65a1c80bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b69befb0980c4bd6f4bb2d9bd97c8c4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CreateProcessA
LoadResource
GetTickCount
DeleteFileA
GetCurrentThread
GetCurrentProcess
GetCurrentThreadId
GetCommandLineA
SetUnhandledExceptionFilter
lstrlenA
FreeLibrary
Sleep
GetSystemDirectoryA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
HeapFree
CreateFileA
ReadFile
CloseHandle
ExitProcess
GetTempPathA
LoadLibraryA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
OutputDebugStringA
WritePrivateProfileStringA
user32
GetMessageA
PostThreadMessageA
wsprintfA
GetInputState
advapi32
AddAce
OpenServiceA
CloseServiceHandle
StartServiceA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
EqualSid
GetAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
OpenSCManagerA
shlwapi
PathFileExistsA
msvcrt
fopen
??1type_info@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
_access
strchr
sprintf
fwrite
strstr
_except_handler3
realloc
malloc
fclose
??3@YAXPAX@Z
??2@YAPAXI@Z
netapi32
NetApiBufferFree
NetUserGetLocalGroups
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ