Static task
static1
Behavioral task
behavioral1
Sample
183587b653eb95177ae8f7ff419d06c5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
183587b653eb95177ae8f7ff419d06c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
183587b653eb95177ae8f7ff419d06c5_JaffaCakes118
-
Size
62KB
-
MD5
183587b653eb95177ae8f7ff419d06c5
-
SHA1
69e23d0891d973d43247870388a35b9d5b0525f7
-
SHA256
ade809233f44d13b78949052c788a5bc6d00cfc97b51f78083fdee5650362f50
-
SHA512
a30336e115fe9d23b769732c5d7932a5ac3ece81887e5d0b4188b5727338d23b8cda97bda791cfda5ce9e84f8d9d1dbfbd010b0f67b7a134d39ac385a4d23f43
-
SSDEEP
768:53SLyyaZPR67hTIVzUneN8wbxbh3Cs8s4O+i/gtQ0NdTQ:5eoj6NTCceawb5Mjsd4tQoTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 183587b653eb95177ae8f7ff419d06c5_JaffaCakes118
Files
-
183587b653eb95177ae8f7ff419d06c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
04cc445b3d18d02ac85872750b916bba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
StartServiceCtrlDispatcherA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
kernel32
GetCommandLineA
Sleep
OpenMutexA
CloseHandle
GetLastError
GetModuleFileNameA
CopyFileA
CreateProcessA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
SetUnhandledExceptionFilter
WideCharToMultiByte
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
IsBadReadPtr
IsBadCodePtr
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
FlushFileBuffers
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE