Static task
static1
Behavioral task
behavioral1
Sample
00392e9b02f1cf2cb46cd2c0d824cd93_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00392e9b02f1cf2cb46cd2c0d824cd93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00392e9b02f1cf2cb46cd2c0d824cd93_JaffaCakes118
-
Size
140KB
-
MD5
00392e9b02f1cf2cb46cd2c0d824cd93
-
SHA1
efd03120b4f90dcbd74dd2968f5555e75e1d35a7
-
SHA256
a48bbe19f7c9b90a4e93827e68dd818245fe52d9a326e127bedee17342ddc820
-
SHA512
dc56a0f37f3cd5811362d726f7a944c5a909fe13e863ee00ce968e9b402ddcb2dbc955cd66dd8deaee989cc39c1162bb1323b87525cf57842e26c17778f237bf
-
SSDEEP
3072:3RGVU7ZwgcCJqO9j+vbFNrQ9KEeuZY37EAKNaMZqnAQpYs9jz:3RTZwC9SvrrQ9KEeuG37RGZgAS9jz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00392e9b02f1cf2cb46cd2c0d824cd93_JaffaCakes118
Files
-
00392e9b02f1cf2cb46cd2c0d824cd93_JaffaCakes118.exe windows:4 windows x86 arch:x86
de91a8394d27d98e24f4e368849dba9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
OpenProcess
WriteFile
GetProcAddress
LoadLibraryA
Sleep
SetFileTime
DuplicateHandle
GetVersionExA
GetStartupInfoA
GetModuleHandleA
CloseHandle
GlobalAlloc
GlobalLock
GetLastError
GlobalUnlock
GlobalFree
GetModuleFileNameA
GetSystemDirectoryA
WinExec
CreateFileA
GetFileAttributesExA
user32
GetMessageA
DispatchMessageA
CreateWindowExA
TranslateMessage
GetDesktopWindow
ShowWindow
RegisterClassExA
DefWindowProcA
PostQuitMessage
advapi32
RegOpenKeyExA
DeleteService
OpenServiceA
StartServiceA
CloseServiceHandle
OpenSCManagerA
RegCloseKey
RegQueryValueExA
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
CreateServiceA
msvcrt
__getmainargs
_stricmp
_controlfp
__set_app_type
__p__fmode
rand
sprintf
strstr
_access
fclose
fflush
fwrite
fopen
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
srand
time
_exit
_XcptFilter
exit
_acmdln
_strlwr
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHDeleteKeyA
SHSetValueA
StrStrA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ