Static task
static1
Behavioral task
behavioral1
Sample
d2d2e5b593065b4718569b3623ae1117_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2d2e5b593065b4718569b3623ae1117_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2d2e5b593065b4718569b3623ae1117_JaffaCakes118
-
Size
50KB
-
MD5
d2d2e5b593065b4718569b3623ae1117
-
SHA1
15d61dcc71f4d3b9b7fe04b80b141e046310bd6e
-
SHA256
b0d20e2230ecd57e14879e01bdbf23658fc5d0394dbcfae60e514c0a8141061c
-
SHA512
abd4c640ea70e42b158338996b326f01fb14b7cd6bdd2a89214a3d22463b0e542ca29893524b7defe200cef8909c2caceb6fceccf1b77af929a4f73b06ee99f2
-
SSDEEP
768:xW8X769YgFYx173yoof1tuTBudWrCrflC9bXBEjYYrOAQ9HIlZ1:zr69Yr17Coof1sBaWrmdCJBapKHIlZ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2d2e5b593065b4718569b3623ae1117_JaffaCakes118
Files
-
d2d2e5b593065b4718569b3623ae1117_JaffaCakes118.exe windows:4 windows x86 arch:x86
b243edccd4f418b8066a80c240fa34f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ExtFloodFill
Pie
SetWindowExtEx
advapi32
OpenSCManagerA
OpenServiceW
AllocateAndInitializeSid
UnlockServiceDatabase
RegCreateKeyExW
RegDeleteKeyA
RegQueryValueExW
SetServiceStatus
LockServiceDatabase
RegQueryValueW
version
GetFileVersionInfoA
GetFileVersionInfoW
VerQueryValueA
kernel32
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
SetLastError
CloseHandle
GetVersionExA
LoadLibraryA
SearchPathW
ExitProcess
msvcrt
strrchr
fread
tolower
_ftol
strstr
_acmdln
swprintf
_read
??3@YAXPAX@Z
isalnum
__set_app_type
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 15KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE