Static task
static1
Behavioral task
behavioral1
Sample
d4fd92abd0267b13b2c40042deb7f912_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4fd92abd0267b13b2c40042deb7f912_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4fd92abd0267b13b2c40042deb7f912_JaffaCakes118
-
Size
144KB
-
MD5
d4fd92abd0267b13b2c40042deb7f912
-
SHA1
184da4285a4924d59aa48588ce5bd990f1609b52
-
SHA256
0b23bce32a95a5ace6204020c917de9ed9b03cf4a926a65cd12c1a89ab7e466d
-
SHA512
9832f361dc49c7b37e2909340ba044a364ae9d1c616b57c28d25b9b0c5710f6125351f994cc043d1f9181a7122bbb6ddbc698ef11aa7b4172762211d575c170f
-
SSDEEP
3072:+cwHJYa6OLd4o4NAQBAC8vGEBHTAfV2LlldruLN3:+/d4+Q/29Fk2LlTup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4fd92abd0267b13b2c40042deb7f912_JaffaCakes118
Files
-
d4fd92abd0267b13b2c40042deb7f912_JaffaCakes118.exe windows:4 windows x86 arch:x86
1dec6768b40d5b1e412f40913b17b78b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetCurrentProcess
GetFileAttributesExA
GetVersionExA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
DuplicateHandle
CloseHandle
GlobalAlloc
WinExec
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
GetSystemDirectoryA
Sleep
SetFileTime
user32
RegisterClassExA
DefWindowProcA
PostQuitMessage
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
advapi32
CreateServiceA
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
DeleteService
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
RegCloseKey
shlwapi
StrStrA
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
rand
strstr
_access
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
fclose
fflush
fwrite
fopen
srand
time
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ