Static task
static1
Behavioral task
behavioral1
Sample
068618e6991e6e352cc86fec5689b1ef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
068618e6991e6e352cc86fec5689b1ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
068618e6991e6e352cc86fec5689b1ef_JaffaCakes118
-
Size
140KB
-
MD5
068618e6991e6e352cc86fec5689b1ef
-
SHA1
201dd7f5bc34a37f586a771a4c4147edeaa8d95e
-
SHA256
b22f62fff5df3572908afc924dd7a2086574a70390dee8cd183d28171affccbc
-
SHA512
bdde12952b00a455806e669135237c90977fbb3293d377909dc2fa4d590278ccdded01f4e1442b9510476407540c8c76556362a680e822ed88baa73a33b85bab
-
SSDEEP
3072:8gZtEJ2N9mnIYnl3nNNtvWuIljSh6qDg3:8gZW3lpMShfg3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 068618e6991e6e352cc86fec5689b1ef_JaffaCakes118
Files
-
068618e6991e6e352cc86fec5689b1ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c240148f57b50e97a6aab6c810705c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleFileNameA
DuplicateHandle
GetCurrentProcess
OpenProcess
WriteFile
GlobalAlloc
GetLastError
GetStartupInfoA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
CreateFileA
GetVersionExA
Sleep
WinExec
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
CloseHandle
user32
ShowWindow
DefWindowProcA
GetMessageA
RegisterClassExA
PostQuitMessage
TranslateMessage
CreateWindowExA
DispatchMessageA
GetDesktopWindow
advapi32
RegOpenKeyExA
ConvertSidToStringSidA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
GetUserNameA
RegCloseKey
RegQueryValueExA
StartServiceA
OpenServiceA
DeleteService
LookupAccountNameA
msvcrt
__getmainargs
_stricmp
_controlfp
__set_app_type
__p__fmode
rand
sprintf
fclose
fflush
fwrite
fopen
_access
strstr
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
time
_except_handler3
_exit
_XcptFilter
exit
_acmdln
_strlwr
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHDeleteKeyA
SHSetValueA
StrStrA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ