Static task
static1
Behavioral task
behavioral1
Sample
e1af5403cf335c96b005a6c93d9e9a9a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e1af5403cf335c96b005a6c93d9e9a9a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1af5403cf335c96b005a6c93d9e9a9a_JaffaCakes118
-
Size
176KB
-
MD5
e1af5403cf335c96b005a6c93d9e9a9a
-
SHA1
f5415c0b044dfc9bf581bbf80e8bd0518ccae69b
-
SHA256
bb4f23808f728a4283d6041bed68ab044dfc64814a3279ab94b6d08e1d81a622
-
SHA512
6aee9f138fc85e14420a8e958681e8a2ebc519c660ce900379a0b057a337c085c972332b20822f41a1faa5f179b724413ae1b7b06fbd66b938b5511ab1b2237b
-
SSDEEP
3072:8zWrHZJyJekaWxGu8ymle/G9i0Mk5kvllxhC73TsuZfA:zHviL/OAk+llx8LwuZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1af5403cf335c96b005a6c93d9e9a9a_JaffaCakes118
Files
-
e1af5403cf335c96b005a6c93d9e9a9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
625fed12a06ea26d0da0f086336f3b2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
SetFileTime
GetFileAttributesExA
DuplicateHandle
GetCurrentProcess
WriteFile
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
Sleep
OpenProcess
LoadLibraryA
GetProcAddress
WinExec
CloseHandle
GetModuleFileNameA
GetSystemDirectoryA
GetLastError
user32
RegisterClassExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
DefWindowProcA
PostQuitMessage
advapi32
RegOpenKeyExA
CloseServiceHandle
GetUserNameA
LookupAccountNameA
ConvertSidToStringSidA
OpenSCManagerA
RegCloseKey
RegQueryValueExA
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
shlwapi
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
_except_handler3
rand
srand
time
fclose
fflush
fwrite
fopen
_access
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
_XcptFilter
exit
_acmdln
__getmainargs
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ