Static task
static1
Behavioral task
behavioral1
Sample
c799e1d25839e1efb2b3d42d6d6efd26_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c799e1d25839e1efb2b3d42d6d6efd26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c799e1d25839e1efb2b3d42d6d6efd26_JaffaCakes118
-
Size
16KB
-
MD5
c799e1d25839e1efb2b3d42d6d6efd26
-
SHA1
921a88a1bb7ec23e72b8748891d0b20313ccbc51
-
SHA256
626eb96a340c865ea8ed721c94fac4504db147b0992e0190438b7cc144c05614
-
SHA512
4ec0adc1f65053350bbb7c6841563f66baa55c5dbce2f96eab3480eb2dfa39cf9b32327b3a0b9c0f4d40f9dad91b7877a70e1b202f43470997284bd7d0c8391d
-
SSDEEP
384:lNboheN0y+PB+I3rYlXzFoTmCCUDQnx1CbLu2JxnGWC3tRW:lxoheN0e42jKKCPDQPCzTnSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c799e1d25839e1efb2b3d42d6d6efd26_JaffaCakes118
Files
-
c799e1d25839e1efb2b3d42d6d6efd26_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3aad032785a99f101197daba2e936ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
OpenProcess
GetFileAttributesA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetLogicalDrives
Process32Next
Process32First
GetExitCodeProcess
GetFileSize
CreateFileA
GetCurrentProcess
DeleteFileA
CreateMutexA
OutputDebugStringA
CopyFileA
GetModuleFileNameA
GetModuleHandleA
PeekNamedPipe
ReadFile
WriteFile
GetComputerNameA
Sleep
CreatePipe
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateThread
WaitForSingleObject
GetStartupInfoA
CloseHandle
TerminateProcess
CreateToolhelp32Snapshot
GetLastError
msvcrt
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strlen
strcpy
??2@YAPAXI@Z
sprintf
atoi
_strcmpi
memset
strcat
strrchr
exit
_XcptFilter
_exit
printf
sscanf
strstr
atol
__CxxFrameHandler
wininet
InternetQueryOptionA
InternetOpenA
InternetReadFile
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetSetOptionA
HttpSendRequestA
InternetCloseHandle
advapi32
CreateProcessAsUserA
CloseServiceHandle
EnumServicesStatusExA
OpenSCManagerA
ControlService
OpenServiceA
StartServiceA
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
QueryServiceStatus
ChangeServiceConfig2A
CreateServiceA
DeleteService
OpenProcessToken
urlmon
URLDownloadToFileA
secur32
GetUserNameExA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ