Static task
static1
Behavioral task
behavioral1
Sample
fcb9279d1aa2f69851bd0aa24b82be55_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcb9279d1aa2f69851bd0aa24b82be55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcb9279d1aa2f69851bd0aa24b82be55_JaffaCakes118
-
Size
105KB
-
MD5
fcb9279d1aa2f69851bd0aa24b82be55
-
SHA1
9d05274bf31c5427d744600fd071a951afce335b
-
SHA256
2dfb18b9ca051dcd3744945c1897db39cb1a308c926230a8e1016408d24536a1
-
SHA512
ecfa4627cda0e2c93c41592eb20fc3bcb9366ec33172ba0bfc9cbda8918db951d108c969021321da6c3f2e77a68b5fbbdad5310218695d7c3e1caa2193c524c1
-
SSDEEP
1536:0IN5efMmBBFT99cMaMs+F0RD+smG8kh1XN76M5XctE5LAxT:PHa1TaMs+eoa5se50xT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcb9279d1aa2f69851bd0aa24b82be55_JaffaCakes118
Files
-
fcb9279d1aa2f69851bd0aa24b82be55_JaffaCakes118.exe windows:5 windows x86 arch:x86
9b94545d2b8e649c31e45d7206b858d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
OpenEventA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
GetModuleHandleA
GetTickCount
DeleteFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CopyFileA
OutputDebugStringA
GetLastError
CreateFileA
WriteFile
OpenProcess
LoadLibraryA
GetProcAddress
GetCurrentProcess
WriteProcessMemory
GetSystemDirectoryA
GetWindowsDirectoryA
MoveFileExA
CreateThread
CloseHandle
Sleep
CreateProcessA
lstrlenA
GetVersionExA
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
GetConsoleMode
GetConsoleCP
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer
user32
PostMessageA
FindWindowA
CheckDlgButton
advapi32
AdjustTokenPrivileges
ControlService
StartServiceA
CreateProcessAsUserA
OpenProcessToken
RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
GetUserNameA
QueryServiceConfigA
ChangeServiceConfigA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
SetServiceStatus
RegOpenKeyExA
RegSetValueExA
RegCloseKey
LookupPrivilegeValueA
shlwapi
PathFileExistsA
wininet
InternetSetOptionA
HttpOpenRequestA
HttpQueryInfoA
InternetCloseHandle
InternetConnectA
InternetOpenA
HttpSendRequestA
InternetReadFile
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ