Static task
static1
Behavioral task
behavioral1
Sample
f083ffd9c0e42c6ca44aadba898e21c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f083ffd9c0e42c6ca44aadba898e21c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f083ffd9c0e42c6ca44aadba898e21c2_JaffaCakes118
-
Size
273KB
-
MD5
f083ffd9c0e42c6ca44aadba898e21c2
-
SHA1
4d67ede73f968650307173c214ed61e5fc16bcaa
-
SHA256
980ba3fa98041530d19626fd7764277d7eaf4093b39e48fb4440e6c1603fe53d
-
SHA512
8282d899f241b2e5187389bd2b391bc4fbe88ccb2c41d51ea841a78cc83c35612912c80ae964d90a600f8b7c9b1541a55659805e91de805115c38fd085e7988d
-
SSDEEP
6144:7tHtP4O9irehc/PCkZpBOXW2Cn/RXNZzVF8G0MBca2u7nCZUWzJ8u:RHtP1cXNZpBOXWln/RXNRVPya2SnmUWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f083ffd9c0e42c6ca44aadba898e21c2_JaffaCakes118
Files
-
f083ffd9c0e42c6ca44aadba898e21c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
086212b483612d74e4ab35ed457bb10e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
ChangeServiceConfig2A
ChangeServiceConfigA
CreateServiceA
EqualSid
InitializeSecurityDescriptor
OpenSCManagerA
RegQueryInfoKeyA
RegisterServiceCtrlHandlerA
kernel32
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateProcessA
DeleteAtom
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetFileAttributesA
GetLastError
GetLocalTime
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionA
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTickCount
GetTimeFormatA
GetVersionExA
GlobalFree
GlobalReAlloc
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
IsBadReadPtr
IsValidCodePage
LCMapStringA
LeaveCriticalSection
LoadResource
LocalFree
MoveFileExA
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
SearchPathA
SetEndOfFile
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetPriorityClass
SetStdHandle
SetUnhandledExceptionFilter
SystemTimeToFileTime
TlsAlloc
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualQuery
WaitForSingleObject
WriteConsoleA
WritePrivateProfileStringA
lstrlenA
user32
ClientToScreen
DispatchMessageA
DrawFocusRect
DrawTextA
EnumChildWindows
GetClassNameA
GetFocus
GetForegroundWindow
GetMessagePos
GetSystemMenu
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
KillTimer
LoadIconA
LoadImageA
LoadStringA
MessageBeep
MessageBoxA
MoveWindow
PtInRect
ScreenToClient
SendDlgItemMessageA
SetCapture
SetCursor
SetTimer
ShowWindow
TranslateMessage
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 230KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ