Static task
static1
Behavioral task
behavioral1
Sample
deb1536f29fc4111fc9a474ab5ecdb3a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
deb1536f29fc4111fc9a474ab5ecdb3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
deb1536f29fc4111fc9a474ab5ecdb3a_JaffaCakes118
-
Size
180KB
-
MD5
deb1536f29fc4111fc9a474ab5ecdb3a
-
SHA1
2e4ce5e0c84b1f221ffb36e535df3443b0e78626
-
SHA256
c0ccf8b1a84ddef3312612c71e66d09000c637a7aacec3ea849675c4a39da0fb
-
SHA512
1636891cdcea939e4584a3b8f79c106bb62cb341153ca369e5d866b43bf7529f3202d1b1469c4c52be382278b2cb91ceb704dcdd95b3e5b0afe38003c755a6ea
-
SSDEEP
3072:3nqbICg5XDSx4wRDJafO5gxTNOcdyLCKZ5T8mWDSn6v54:6bZg5To4wRDI4ECXTSm6v+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deb1536f29fc4111fc9a474ab5ecdb3a_JaffaCakes118
Files
-
deb1536f29fc4111fc9a474ab5ecdb3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
fba0eecac3ec671d2654f28e54dddf6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
advapi32
RegCreateKeyExA
OpenSCManagerA
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegSetValueExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
shlwapi
SHEnumKeyExA
SHGetValueA
SHEnumValueA
StrStrIA
SHSetValueA
rpcrt4
UuidToStringA
ole32
CoCreateGuid
CoInitialize
CoCreateInstance
user32
wsprintfA
msvcrt
isupper
wctomb
__mb_cur_max
printf
strlen
strcat
strcpy
fopen
??2@YAPAXI@Z
islower
strerror
isspace
isgraph
isalnum
isxdigit
ispunct
isalpha
tolower
sprintf
isdigit
atoi
strncpy
rand
wcscpy
mbstowcs
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fclose
fwrite
time
memcmp
memset
malloc
free
memcpy
imagehlp
ImageNtHeader
kernel32
GetModuleHandleA
GetStartupInfoA
GetFileAttributesExA
SetFileTime
CreateFileA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
lstrlenA
GetSystemDirectoryA
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
GetLastError
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE