Static task
static1
Behavioral task
behavioral1
Sample
05f24660878aa3025d7d56a70de077db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05f24660878aa3025d7d56a70de077db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05f24660878aa3025d7d56a70de077db_JaffaCakes118
-
Size
59KB
-
MD5
05f24660878aa3025d7d56a70de077db
-
SHA1
4195a1d1108e4fccedb456d7fa18a77b0dffa5bb
-
SHA256
e8ef432ac6f8213a8e26b02cd5342ed3052fea603facc968091a078e2e4c5b2a
-
SHA512
f3010679dbce01b597338c2dc3d20261f24d7e6e301b8fa4e9635b9a3804275b9b9f5d9c18a0a55b11dadaf0d9c959f3d1ed4dd4866ac2dcf6505e81777139ff
-
SSDEEP
1536:ck1Q3mvtKzNIn0Js1Hjy3MO9Qj61oIVnx:cUNvMNIdHjHO9Qj61oIV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f24660878aa3025d7d56a70de077db_JaffaCakes118
Files
-
05f24660878aa3025d7d56a70de077db_JaffaCakes118.exe windows:5 windows x86 arch:x86
8a49ef7f63a356bbaa8e5294302e99bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
LockServiceDatabase
OpenProcessToken
ChangeServiceConfigA
SetServiceStatus
RegEnumValueA
OpenSCManagerW
DeleteService
GetUserNameA
RegEnumKeyExA
UnlockServiceDatabase
GetSecurityDescriptorControl
CloseServiceHandle
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExW
RegDeleteKeyA
RegDeleteValueW
ChangeServiceConfig2A
RegQueryValueExW
StartServiceW
RegCreateKeyExW
RegQueryValueW
QueryServiceConfigA
OpenServiceW
RegEnumKeyExW
LookupPrivilegeValueA
RegDeleteKeyW
RegSetValueExW
kernel32
FindFirstFileA
GetTempPathA
IsBadCodePtr
GetThreadTimes
SetCurrentDirectoryA
CompareStringW
VirtualAlloc
MultiByteToWideChar
CompareStringA
WriteConsoleW
GetVersionExW
CreateMutexA
HeapReAlloc
ExitProcess
lstrcmpW
MoveFileExA
CopyFileA
DeviceIoControl
MapViewOfFile
GetConsoleOutputCP
SetHandleCount
GetFileTime
GlobalUnlock
LockResource
msvcrt
exit
_snwprintf
strncmp
_errno
_itow
fclose
fprintf
_wtoi
wcsncat
free
_local_unwind2
_XcptFilter
__p__fmode
_controlfp
rand
swscanf
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA
gdi32
GetWinMetaFileBits
CopyEnhMetaFileW
DeleteDC
CreatePalette
EndDoc
CreateRectRgnIndirect
OffsetRgn
DeleteObject
SaveDC
Arc
GetDeviceCaps
CreateBrushIndirect
CreateCompatibleDC
ScaleWindowExtEx
SetROP2
CreateEllipticRgn
Ellipse
SetTextAlign
CreatePatternBrush
GetTextAlign
ExtTextOutW
TextOutA
SetWindowOrgEx
GetTextExtentPoint32A
CreateMetaFileA
GetEnhMetaFilePaletteEntries
CreateBitmapIndirect
CreateDIBitmap
Sections
.text Size: 43KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ