Static task
static1
Behavioral task
behavioral1
Sample
d1aa9ffc1aae646d6fe7d7b5f8958897_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1aa9ffc1aae646d6fe7d7b5f8958897_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1aa9ffc1aae646d6fe7d7b5f8958897_JaffaCakes118
-
Size
180KB
-
MD5
d1aa9ffc1aae646d6fe7d7b5f8958897
-
SHA1
6906effc8a2377a7c60e1258ce526f6230b9c750
-
SHA256
ddbe57acc08e09af4c0287a6993edf2724765c6818665aa822c6e55ac171a922
-
SHA512
cf494cd7549de63a86a83b4edc1c99767d13591824809274967e8785e20f1e5a8116c1d74930658ca4a0f70c251eb49eff7705cb429f688b1206e4a56eae87cd
-
SSDEEP
3072:O6spI/z//hQxmjbce3as90SnXXOj4sAGPZx/KmIaYPoPfA1XOYRjF5u+f+//34aC:LspI/z/ZKSnmj/PZwmMPGfoeo3bf+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1aa9ffc1aae646d6fe7d7b5f8958897_JaffaCakes118
Files
-
d1aa9ffc1aae646d6fe7d7b5f8958897_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c9c0b3566102852e5f88b92b7d30159
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
advapi32
StartServiceA
CryptAcquireContextA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
OpenServiceA
DeleteService
OpenSCManagerA
CryptReleaseContext
CryptGenRandom
ole32
CoCreateInstance
CoInitialize
CoCreateGuid
shlwapi
SHEnumKeyExA
SHGetValueA
SHEnumValueA
StrStrIA
SHSetValueA
shell32
SHGetSpecialFolderPathA
rpcrt4
UuidToStringA
msvcrt
memset
isgraph
rand
memcmp
isalpha
isalnum
strcpy
malloc
time
islower
ispunct
wctomb
__mb_cur_max
isupper
tolower
isspace
isxdigit
??2@YAPAXI@Z
strncpy
wcscpy
mbstowcs
srand
atoi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcat
printf
strerror
sprintf
strlen
fopen
fwrite
fclose
memcpy
free
imagehlp
ImageNtHeader
kernel32
GetModuleHandleA
SleepEx
GetStartupInfoA
GetVersionExA
ExitProcess
GetLastError
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
WideCharToMultiByte
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
lstrlenA
GetSystemDirectoryA
GetLocalTime
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE