Static task
static1
Behavioral task
behavioral1
Sample
09352878e410e5f01ee0c0c4ad2637ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09352878e410e5f01ee0c0c4ad2637ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09352878e410e5f01ee0c0c4ad2637ba_JaffaCakes118
-
Size
64KB
-
MD5
09352878e410e5f01ee0c0c4ad2637ba
-
SHA1
76ec1a215f92fe3295cad2ece5f053a6f5790443
-
SHA256
a762fb13a4f8f6dac6f521497677fce485106e70ca1450470b0b668e8ab553c1
-
SHA512
d9190a17dcaa6f1a604502d0713db0d6345dac2c88aeea54d863cad00d527391b91f2ebf78c49adcae3a594303ddabfc34656e02bafac169198215e5ef4114ee
-
SSDEEP
384:2NXSX7/dTPKKSl+2ozsAbywBaVmlSamcXeyhKYUkruAopxQdJY1IDqd/I:2NcZPKKsoz9yw4omJ1RKuAorQowo/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09352878e410e5f01ee0c0c4ad2637ba_JaffaCakes118
Files
-
09352878e410e5f01ee0c0c4ad2637ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
47cda8474d9c5bb1f8ae553461914b0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetWindowsDirectoryA
DeleteFileA
lstrcpyA
lstrcatA
lstrlenA
GetLastError
GetSystemDirectoryA
WideCharToMultiByte
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetVersionExA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
advapi32
RegCloseKey
RegDeleteValueA
OpenServiceA
ControlService
OpenSCManagerA
RegDeleteKeyA
RegOpenKeyExA
QueryServiceStatus
DeleteService
CloseServiceHandle
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE