Static task
static1
Behavioral task
behavioral1
Sample
d5feac002fd2608b2e07b386eb6dc6fc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5feac002fd2608b2e07b386eb6dc6fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5feac002fd2608b2e07b386eb6dc6fc_JaffaCakes118
-
Size
11KB
-
MD5
d5feac002fd2608b2e07b386eb6dc6fc
-
SHA1
3f35f4f94b0ea374bdd72b3d2f5686fae5fb3bb0
-
SHA256
88a51cbd319ea95ad241f2abcfb9fb129726bd5afce619b83c11e42152b5f345
-
SHA512
4a25ca302494dad87b40656acd58077b8f14dabd0fa0260fdcc97636de58a94715cb87f63de7eb7cdac442804ea3d070ee50be45660b383d98dcfee497e7d358
-
SSDEEP
96:gTntkd3Gf5Aesj1HiWD4AnBq3JJVQa7NObQ0wdZSbrQDgFgpKXGenkiTiaxjIP7U:knPGliWyJJV4Q1S/qJaxcP7dCCCQFi5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5feac002fd2608b2e07b386eb6dc6fc_JaffaCakes118
Files
-
d5feac002fd2608b2e07b386eb6dc6fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
bc2859e2e3a263ee3e493b0520f28d16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCommandLineA
SetFileAttributesA
DeleteFileA
Sleep
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
SetCurrentDirectoryA
lstrcatA
GetSystemTime
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
CloseHandle
GetFileSize
CreateFileA
WriteFile
GetLocalTime
lstrlenA
SetFilePointer
ExitProcess
GetModuleHandleA
GetStartupInfoA
lstrcmpiA
user32
wsprintfA
advapi32
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
CreateServiceA
CloseServiceHandle
ChangeServiceConfigA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
leex Size: 28B - Virtual size: 28B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ