Static task
static1
Behavioral task
behavioral1
Sample
d7c2a7a5c82fab6e1cefd40e96eb0b80_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7c2a7a5c82fab6e1cefd40e96eb0b80_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d7c2a7a5c82fab6e1cefd40e96eb0b80_JaffaCakes118
-
Size
851KB
-
MD5
d7c2a7a5c82fab6e1cefd40e96eb0b80
-
SHA1
078a9f0b41503c5494ec56eb7bd1fd84048baa37
-
SHA256
ee75691a4aa94708ad27300c7c61d35bb84cfbf87c6a10b2b5f0922301ef76aa
-
SHA512
9f1095d948368208da979c49c7cbadf15e08268921a1f5b65503982bd2157ad2d6f3654b06d5b4f8168796212c02ccf2b62206543fc76b853a641fd02b48ba19
-
SSDEEP
24576:bH+EUJP3Lh12ckOFTeUeUw9rmHjAORbreGl:m9pemHj36g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7c2a7a5c82fab6e1cefd40e96eb0b80_JaffaCakes118
Files
-
d7c2a7a5c82fab6e1cefd40e96eb0b80_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f1233fb8f2bc520588b8a89674bcb48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedDecrement
CreateFileA
InitializeCriticalSection
GetModuleHandleA
LocalAlloc
GetSystemDirectoryA
UnmapViewOfFile
LCMapStringW
EnterCriticalSection
SetEndOfFile
FindFirstFileA
GetFileSize
LeaveCriticalSection
VirtualAlloc
FindClose
ReadFile
MapViewOfFile
CreateFileMappingA
LocalFree
DeleteCriticalSection
GetCommandLineA
CloseHandle
WriteFile
SetFilePointer
GetModuleFileNameA
DeleteFileA
advapi32
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
msports
SerialPortPropPageProvider
kbdcz1
KbdLayerDescriptor
comctl32
InitCommonControls
user32
SetWindowPos
DialogBoxParamA
Sections
Size: 1024B - Virtual size: 807B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1024B - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 709KB - Virtual size: 810KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ