Static task
static1
Behavioral task
behavioral1
Sample
fb948d08f4ee1d487f8a0ea6282b7418_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb948d08f4ee1d487f8a0ea6282b7418_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb948d08f4ee1d487f8a0ea6282b7418_JaffaCakes118
-
Size
180KB
-
MD5
fb948d08f4ee1d487f8a0ea6282b7418
-
SHA1
ae1077475b237639f6d8727d2d86f3e160aec646
-
SHA256
9db83055d2addb8fbd44a1164f134d3de9368b21b899d6465f729fce7941e1c0
-
SHA512
f4c3d0a78351534133e2e8e5cce1e2d12fdfdcf8f9a3a84f416f85d7a55d20daef2eaf6a7e61ae03191225aea130803bd26da2715b144304a6c3b744bb83cf81
-
SSDEEP
3072:E08MBPE/T3/4sKEg18AcFSd3EA7yV1e1GV/+m:EqOY8A8Sd3d7ok1g+m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb948d08f4ee1d487f8a0ea6282b7418_JaffaCakes118
Files
-
fb948d08f4ee1d487f8a0ea6282b7418_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b2bdc74bc4d8239c83c16a1c5fb2191
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
DuplicateHandle
OpenProcess
WriteFile
CreateFileA
SetFileTime
GetFileAttributesExA
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
WinExec
GetProcAddress
CreateProcessA
WaitForSingleObject
TerminateProcess
CloseHandle
Sleep
FreeLibrary
WideCharToMultiByte
GetSystemDirectoryA
LoadLibraryA
GetCurrentProcess
user32
RegisterWindowMessageA
SendMessageTimeoutA
GetClassNameA
PostMessageA
EnumChildWindows
GetWindowThreadProcessId
EnumWindows
ShowWindow
CreateWindowExA
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
RegisterClassExA
advapi32
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
OpenServiceA
ConvertSidToStringSidA
LookupAccountNameA
StartServiceA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CoInitialize
CoUninitialize
oleaut32
SysFreeString
VariantClear
shlwapi
SHGetValueA
SHSetValueA
msvcrt
strstr
_stricmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
time
srand
fopen
fwrite
fflush
fclose
_access
__CxxFrameHandler
_strlwr
sprintf
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
atoi
strchr
dbghelp
ImageNtHeader
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ydata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
udata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
odata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ndata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ