Static task
static1
Behavioral task
behavioral1
Sample
0023dfbf43d39632ee33a0c803c06212_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0023dfbf43d39632ee33a0c803c06212_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0023dfbf43d39632ee33a0c803c06212_JaffaCakes118
-
Size
108KB
-
MD5
0023dfbf43d39632ee33a0c803c06212
-
SHA1
a4e60bfcc9f98fe71b03919b0ce5ce0bfd3168da
-
SHA256
65de95afd8eb6bacc5a6bd5fcf540fda03f090f4734bf37fef384e81e6676a47
-
SHA512
e51f8132689414c3a2cdf009b737a7b0615e24e26ed8f9772c5608da368cf3492478df2357f98c48e0097fef957cff617eb38968fde7de5c88cfcf0b64b368dc
-
SSDEEP
3072:np7MXpklpI5hEqyn3tbI4F/SAGgEsJxLrEaBH:np7MXpklp+ydBFqRgbJxLrp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0023dfbf43d39632ee33a0c803c06212_JaffaCakes118
Files
-
0023dfbf43d39632ee33a0c803c06212_JaffaCakes118.exe windows:4 windows x86 arch:x86
ebb5fd09a73f72ab1e36a2e71c7fb3bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
GetModuleHandleA
ReleaseMutex
CreateMutexA
SetFileAttributesA
CreateToolhelp32Snapshot
CreateThread
GetCurrentThreadId
GetStartupInfoA
Process32First
Process32Next
GetModuleFileNameA
SetFilePointer
ReadFile
GetProcessHeap
HeapAlloc
HeapFree
lstrcatA
GetLastError
GetProcAddress
SetLastError
lstrcpyA
LoadResource
SetFileTime
lstrlenA
CloseHandle
ExitProcess
GetWindowsDirectoryA
FreeLibrary
LoadLibraryA
Sleep
user32
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
PostThreadMessageA
GetInputState
wsprintfA
advapi32
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
StartServiceA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
shell32
ShellExecuteA
msvcrt
??3@YAXPAX@Z
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
strtok
memset
??2@YAPAXI@Z
memcpy
strchr
realloc
malloc
strlen
__CxxFrameHandler
_CxxThrowException
_except_handler3
fclose
fwrite
fopen
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
ws2_32
inet_addr
iphlpapi
GetInterfaceInfo
AddIPAddress
Sections
.cctv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ