Static task
static1
Behavioral task
behavioral1
Sample
06f15a244e93b8c1968bbab820b579c1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
06f15a244e93b8c1968bbab820b579c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06f15a244e93b8c1968bbab820b579c1_JaffaCakes118
-
Size
56KB
-
MD5
06f15a244e93b8c1968bbab820b579c1
-
SHA1
21b3f2e57d5943c15ba4cb92d0d875c5ba5a6e9e
-
SHA256
799095d7f2a7fa20358ce55c4b1d5673388b4d953215eddcd1f51fbe2126251d
-
SHA512
2fcd554d20ea1a72fc67d3255d2b4f0ccb9db3ec12c2239ee613d5aa21b6a40a28b69d985ffba4ee261e390f78b916e5e668131b231f0d0368fb40c9dba8449a
-
SSDEEP
768:fT/U7wSAOYJEYVtFJ2j2/KpqWKaKPUrc11noF7/:f7UESAOYJEY5AqWKrPUioFL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f15a244e93b8c1968bbab820b579c1_JaffaCakes118
Files
-
06f15a244e93b8c1968bbab820b579c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
142dbc60c1af57d2688f1435233b4498
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
WriteProfileStringA
GetProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcmpiA
Sleep
CloseHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
GetExitCodeProcess
TerminateProcess
GetWindowsDirectoryA
SetCurrentDirectoryA
lstrcpynA
FindFirstFileA
SetFileAttributesA
FindNextFileA
GetStringTypeW
GetCPInfo
FindClose
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileA
GetVersionExA
GetEnvironmentStrings
GetLastError
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
ReadFile
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
SetFilePointer
VirtualFree
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualAlloc
WriteFile
HeapAlloc
SetStdHandle
HeapReAlloc
FlushFileBuffers
user32
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
EnumChildWindows
PostMessageA
MessageBoxA
GetFocus
advapi32
RegDeleteValueA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
setupapi
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoA
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE