Static task
static1
Behavioral task
behavioral1
Sample
cfcb321c8fa8d4edb4db8e6b36babc75_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cfcb321c8fa8d4edb4db8e6b36babc75_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfcb321c8fa8d4edb4db8e6b36babc75_JaffaCakes118
-
Size
172KB
-
MD5
cfcb321c8fa8d4edb4db8e6b36babc75
-
SHA1
4ba34d88b7d4f1bf01c374a6fd3671891db99dba
-
SHA256
545c187c076a7ffcfba28864588b33b2bcdf87f0639e334f64de558fb9d6ed3a
-
SHA512
fbdae55f2adbab888314c90b1fe51415ff9944103f08e171c3a149343a6f3fee67bdab1ef07018aa3e6e537a9069e4a593655861271e4b368b261ecfe597494f
-
SSDEEP
3072:ZuZtIgk3oq45NelQ7DrS7BFXAhV7p4bcVZCYiFA:ZuZ5VH5moDmrXATZC4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfcb321c8fa8d4edb4db8e6b36babc75_JaffaCakes118
Files
-
cfcb321c8fa8d4edb4db8e6b36babc75_JaffaCakes118.exe windows:4 windows x86 arch:x86
37e736bbd11dfedbf12254bc9026141a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetLastError
WriteFile
Sleep
SetFileTime
GetFileAttributesExA
GetVersionExA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
DuplicateHandle
GetSystemDirectoryA
OpenProcess
GetProcAddress
CloseHandle
LoadLibraryA
WinExec
user32
TranslateMessage
CreateWindowExA
ShowWindow
GetDesktopWindow
DispatchMessageA
RegisterClassExA
GetMessageA
DefWindowProcA
PostQuitMessage
advapi32
ConvertSidToStringSidA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
StartServiceA
OpenServiceA
LookupAccountNameA
GetUserNameA
DeleteService
CreateServiceA
OpenSCManagerA
msvcrt
__getmainargs
_controlfp
__set_app_type
__p__fmode
_except_handler3
sprintf
_access
fclose
fflush
fwrite
fopen
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
time
_exit
_XcptFilter
exit
_acmdln
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHSetValueA
SHDeleteKeyA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ