Static task
static1
Behavioral task
behavioral1
Sample
f6eb4503412906b412718c0aca761dee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6eb4503412906b412718c0aca761dee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6eb4503412906b412718c0aca761dee_JaffaCakes118
-
Size
192KB
-
MD5
f6eb4503412906b412718c0aca761dee
-
SHA1
58567af05c050281db2ec66636703ddca4376ba0
-
SHA256
add17b186593be7232568902600ca8379d30d540d245a0171283e1d3140b669c
-
SHA512
7f8b38e71bbda3e8bd337f42bb38f23847885d79f4364f49935d042bbd7ebe548943ac70a7a0d7cac49e6814e78cbd764507d7272417250e4bd899a27f27a0d2
-
SSDEEP
3072:fMLpD8k7Vm6W2Ff+/IsYqSU3hUP4PuraQsOW6ekAO7wy2zLD/LKx:gVm6W20/IsCUKP4WpjWJ7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6eb4503412906b412718c0aca761dee_JaffaCakes118
Files
-
f6eb4503412906b412718c0aca761dee_JaffaCakes118.exe windows:4 windows x86 arch:x86
9faa8bafc4e0abae3a60dd94253b0c28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
DeleteFileA
SetFileAttributesA
Process32Next
GetCurrentProcessId
Process32First
SetUnhandledExceptionFilter
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
OpenEventA
ExpandEnvironmentStringsA
GetShortPathNameA
GetFileAttributesA
CreateEventA
WaitForSingleObject
GetModuleFileNameA
lstrcmpiA
GetSystemDirectoryA
GetTickCount
FindFirstFileA
FindNextFileA
CreateFileA
WriteFile
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
MoveFileA
GetCurrentDirectoryA
GetTempPathA
GetWindowsDirectoryA
lstrcpyA
lstrlenA
SetEnvironmentVariableA
CreateDirectoryA
ExitProcess
lstrcatA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
Sleep
CreateToolhelp32Snapshot
HeapFree
user32
wsprintfA
CharNextA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
tolower
toupper
malloc
free
strstr
_CxxThrowException
__CxxFrameHandler
strcmp
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
_ftol
srand
rand
strlen
strcpy
strchr
strncat
strcat
_except_handler3
memset
_strlwr
_stricmp
_strupr
strncpy
_strnicmp
_strrev
_itoa
advapi32
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAce
EqualSid
GetAce
InitializeAcl
GetLengthSid
GetAclInformation
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupAccountNameA
GetFileSecurityA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
ChangeServiceConfig2A
CloseServiceHandle
DeleteService
CreateServiceA
OpenSCManagerA
ControlService
StartServiceA
GetServiceKeyNameA
GetUserNameA
SetFileSecurityA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ