Static task
static1
Behavioral task
behavioral1
Sample
38c96b868f3804211cea3f12d4796f33_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
38c96b868f3804211cea3f12d4796f33_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38c96b868f3804211cea3f12d4796f33_JaffaCakes118
-
Size
73KB
-
MD5
38c96b868f3804211cea3f12d4796f33
-
SHA1
4d1bc7baf7c50158e6c4a66f0fb377c5c57a8bb5
-
SHA256
e70ab9f217d84334e33dcbc35b5feb94ac1887dddaccdf576a74b55dcbbe1bed
-
SHA512
24eea62fbb4cd76a867db1db577e18e150171a34a81878a3a78a5a131505f2f5e93930a3c5b58bccd8ca27f3fdf44bb645961d0d0f74990564a0d910d35ca296
-
SSDEEP
1536:I3vCmXjpAwlZfZMA52ytL2gR9DQTGCePeO1X:Iam1ZZNtL2gRuGCfO1X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38c96b868f3804211cea3f12d4796f33_JaffaCakes118
Files
-
38c96b868f3804211cea3f12d4796f33_JaffaCakes118.exe windows:4 windows x86 arch:x86
de3946df0f283bcf7a201dbd8bbf7eb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
StartServiceCtrlDispatcherA
OpenSCManagerA
CloseServiceHandle
CreateServiceA
DeleteService
ControlService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
ws2_32
WSAGetLastError
kernel32
GetSystemInfo
VirtualProtect
Sleep
GetLastError
GetCommandLineA
OpenMutexA
CreateMutexA
CloseHandle
GetModuleFileNameA
CopyFileA
CreateProcessA
GetEnvironmentVariableA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RtlUnwind
RaiseException
GetStartupInfoA
GetVersionExA
HeapFree
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
HeapAlloc
HeapSize
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
SetFilePointer
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE