Static task
static1
Behavioral task
behavioral1
Sample
f5e2dec5faefc56c21d35c2ef3d8ce46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5e2dec5faefc56c21d35c2ef3d8ce46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5e2dec5faefc56c21d35c2ef3d8ce46_JaffaCakes118
-
Size
136KB
-
MD5
f5e2dec5faefc56c21d35c2ef3d8ce46
-
SHA1
266b0c06bc27b9deb851b1d5c306b311f97aa67b
-
SHA256
e62f5386990715dbcbc8362669e71bad3031820ed3ad90bef92544b5990a9402
-
SHA512
e5615ec11f93bee468a92617d99d2ea2dc4bf18c1b01b83c2b6799743531b10e78d8e0d16409f60ae521aab46d0980a4ba68f5e3a2ebaf3e59d3e97c98d93fe7
-
SSDEEP
1536:5e0ta0vY5ZXFCx1qtegQza2o6rXaY+9HBxKWKF93kqe47sUC1vZngSls+:40A0vSqx1qtegd6jSBTKF9VbQlngss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e2dec5faefc56c21d35c2ef3d8ce46_JaffaCakes118
Files
-
f5e2dec5faefc56c21d35c2ef3d8ce46_JaffaCakes118.exe windows:4 windows x86 arch:x86
e96c4bed2e87ac488cc029ff034f5a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetModuleFileNameA
CreateThread
GetTempPathA
lstrlenA
GetEnvironmentVariableA
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindFirstFileA
HeapAlloc
WriteFile
FindClose
Sleep
GetTickCount
lstrcatA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetLastError
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
user32
wsprintfA
advapi32
RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ