Static task
static1
Behavioral task
behavioral1
Sample
c0297de614115f8f9e72e529b96c55e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0297de614115f8f9e72e529b96c55e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0297de614115f8f9e72e529b96c55e5_JaffaCakes118
-
Size
148KB
-
MD5
c0297de614115f8f9e72e529b96c55e5
-
SHA1
4b247ad29107c89d31243c07a401411eda7863e2
-
SHA256
140782e19dac7368163fdb059443e98c6523fe9304bce7dddaf07807eea6c1b4
-
SHA512
993f67b298f09b4fdbc131fc6e2ad7422efc744836379e7568a4fb8d51841b68fc8f49112bdf620eb34d10eb3cbc6659f0f35a4e4e83db8c8016f0bfac70582f
-
SSDEEP
1536:WmsCew+2OGx6prymJor0fbMbR/p7iid6aIpOBS6CSz/mlCSk/+Jy/z0nbjgDelMG:lnbmJ5GOid+6CEmISk+ecjgDelT5J8I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0297de614115f8f9e72e529b96c55e5_JaffaCakes118
Files
-
c0297de614115f8f9e72e529b96c55e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9edba6bbb08c33821b8ec09c8ce3250
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
GetVersionExA
SetFileTime
GetFileAttributesExA
DuplicateHandle
GetCurrentProcess
WriteFile
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
CloseHandle
GetLastError
WinExec
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
Sleep
CreateFileA
user32
PostQuitMessage
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
advapi32
RegQueryValueExA
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
LookupAccountNameA
GetUserNameA
RegCloseKey
RegOpenKeyExA
DeleteService
CreateServiceA
ConvertSidToStringSidA
shlwapi
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
??3@YAXPAX@Z
rand
??2@YAPAXI@Z
strstr
_access
_except_handler3
srand
time
fclose
fflush
fwrite
fopen
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ