Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3f434449f3a5bdf0db446f7b9de9340e.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3f434449f3a5bdf0db446f7b9de9340e.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_3f434449f3a5bdf0db446f7b9de9340e
-
Size
188KB
-
MD5
3f434449f3a5bdf0db446f7b9de9340e
-
SHA1
3a2c3ed61d20e8168794422422f1ae8592164b2a
-
SHA256
e959437b18df465a508a1fd585972be6ded86f322730c4054180520cf2f9bc5d
-
SHA512
588c4fd25dada3801cf10609dc21346bf79d642499307841203f10c32632426bac81f7501f633e5001366665ecfa8cd07d13428d55b9603c15f9e52fac5d70a9
-
SSDEEP
3072:HoPqsxW6PnfJ3ihBLETBkbG+KcijGvpD2SC6llrdV3BbTakQ:NsxW6PnfJ3yLs+VKcwYVlbxTak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3f434449f3a5bdf0db446f7b9de9340e
Files
-
JaffaCakes118_3f434449f3a5bdf0db446f7b9de9340e.exe windows:4 windows x86 arch:x86
378350bd3e0b64410d2239a708e0f9dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
ChangeServiceConfig2A
CloseServiceHandle
DeleteService
CreateServiceA
OpenSCManagerA
ControlService
StartServiceA
GetServiceDisplayNameA
GetServiceKeyNameA
kernel32
GetLastError
CreateDirectoryA
GetFileAttributesA
lstrlenA
DeleteFileA
SetFileAttributesA
CloseHandle
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
GetTickCount
GetSystemDirectoryA
Sleep
GetModuleHandleA
ExitProcess
SetEnvironmentVariableA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
MoveFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetShortPathNameA
ExpandEnvironmentStringsA
OpenEventA
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
user32
wsprintfA
CharNextA
shlwapi
SHDeleteKeyA
msvcrt
strstr
_strlwr
_strrev
strlen
free
malloc
_except_handler3
rand
srand
_ftol
strcpy
toupper
tolower
strcat
strchr
memset
memcpy
strcmp
__CxxFrameHandler
strncpy
_stricmp
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_itoa
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ