Static task
static1
Behavioral task
behavioral1
Sample
ce83f74041132f383fc8df5192e20e85_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce83f74041132f383fc8df5192e20e85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce83f74041132f383fc8df5192e20e85_JaffaCakes118
-
Size
53KB
-
MD5
ce83f74041132f383fc8df5192e20e85
-
SHA1
8d979ef4f3fcd5a5333eb8ddf52efa2cfd76fefb
-
SHA256
6ff236731789a6c3e3716d5f297690aaac1eaba09c2c0cedfe142f41cf0dbd87
-
SHA512
109585ad82d6bfa6693c70e49538f5fd18ecafd95f0fdacf8c79441493f03d5212f24b405fbcaa2639c269ab9a9b1d82028928bf3972456f3bcccad84f5ad9f2
-
SSDEEP
1536:LAYVphLBvVhnakawdw/VckK6nJ1thk9VxEZB:Lfphxnakh0ckKCPthire
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce83f74041132f383fc8df5192e20e85_JaffaCakes118
Files
-
ce83f74041132f383fc8df5192e20e85_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b87ebad4bc281497224694428d91a06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
CreateServiceA
EqualSid
LookupAccountSidA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
SetServiceStatus
kernel32
CloseHandle
CopyFileA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DuplicateHandle
ExitProcess
FindNextFileA
FindResourceA
FreeLibrary
GetACP
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDriveTypeA
GetExitCodeProcess
GetLastError
GetLocaleInfoA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemDirectoryA
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsValidCodePage
IsValidLocale
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
RaiseException
ReadFile
SearchPathA
SetEnvironmentVariableA
SetEvent
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
TlsFree
VirtualAlloc
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
user32
BeginPaint
CharPrevA
CharUpperA
CheckMenuItem
CopyRect
CreatePopupMenu
DrawIcon
FindWindowA
GetAsyncKeyState
GetClientRect
GetFocus
GetMenuItemCount
GetMessageA
GetMessagePos
GetSysColorBrush
GetSystemMetrics
GetWindowDC
IsChild
IsDlgButtonChecked
LoadBitmapA
LoadImageA
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
SendDlgItemMessageA
SetWindowRgn
SetWindowTextA
UpdateWindow
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ