Static task
static1
Behavioral task
behavioral1
Sample
e136f0f2afe8389c41786bfb9ae64d86_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e136f0f2afe8389c41786bfb9ae64d86_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e136f0f2afe8389c41786bfb9ae64d86_JaffaCakes118
-
Size
140KB
-
MD5
e136f0f2afe8389c41786bfb9ae64d86
-
SHA1
780c3188f6fcf045aba75627ca49a3971ee6aad8
-
SHA256
14c4af358f966f76f1f47f55b85236ac594c2d54d636db080622b331be0b9baf
-
SHA512
8df36d3fadc1420a26227862fdfe2167ca0bdb11742a3995e7295981fd8685a24b4dbacac4c685513f9c2b8ab14d6735c770a89cf226b3da25aa99760d8d45fe
-
SSDEEP
3072:JQJ14HjmleFzGoxhinwwEpK5iTpt01E1qGQbqwH4w8EJ29:JQJ1ZleFzGwiiK5+E18AbqXEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e136f0f2afe8389c41786bfb9ae64d86_JaffaCakes118
Files
-
e136f0f2afe8389c41786bfb9ae64d86_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3327ecd0763185e1dffaaea76869070
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetFileAttributesA
GetSystemDirectoryA
GetCurrentProcess
ReadFile
SetFilePointer
GetProcAddress
LoadLibraryA
OpenProcess
GetModuleHandleA
WaitForSingleObject
CreateRemoteThread
WinExec
FreeLibrary
GetVersion
TerminateProcess
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
GetTempPathA
DeleteFileA
CreateThread
GetCurrentThreadId
GetStartupInfoA
GetLastError
MoveFileA
GetModuleFileNameA
lstrcatA
SetLastError
lstrcpyA
FindResourceA
LoadResource
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
lstrlenA
CloseHandle
FreeResource
GetWindowsDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpiA
ExitProcess
GetLocalTime
user32
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
BlockInput
MessageBoxA
GetInputState
PostThreadMessageA
wsprintfA
advapi32
CloseServiceHandle
OpenSCManagerA
CreateServiceA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
StartServiceA
OpenServiceA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
msvcrt
isdigit
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
strtok
??2@YAPAXI@Z
memset
memcpy
strchr
realloc
malloc
strlen
strcat
__CxxFrameHandler
_CxxThrowException
_except_handler3
strcpy
??3@YAXPAX@Z
strncmp
strtoul
_strlwr
strcmp
strstr
??1type_info@@UAE@XZ
_exit
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ