Static task
static1
Behavioral task
behavioral1
Sample
f0631ffbcf1ffc71d87399ce4283c049_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0631ffbcf1ffc71d87399ce4283c049_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0631ffbcf1ffc71d87399ce4283c049_JaffaCakes118
-
Size
324KB
-
MD5
f0631ffbcf1ffc71d87399ce4283c049
-
SHA1
3eee9c9afa72586581d2dd3ab42e7b10c997c62f
-
SHA256
e03cad396b5d6eeb61f1dae8f1ee8305ba9392e736450daf6adf60e793e09291
-
SHA512
496d9d233e4a321158845fd1b0433ed7e71486f611f3a0efe191be945ca9f3d359c9233e836dda0010418ba7ffd9b5654aa875166d7f33cbb0ea9c49222e3be3
-
SSDEEP
6144:v3isXd6FNI2Yrix0D4mnlaztkk8/a6DEX76w0T:v3vg047ztNiEL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0631ffbcf1ffc71d87399ce4283c049_JaffaCakes118
Files
-
f0631ffbcf1ffc71d87399ce4283c049_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ddabda3734f87b05e55a5f23b2d16d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
DeregisterEventSource
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
RegisterTraceGuidsW
ReportEventW
UnregisterTraceGuids
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
kernel32
WaitForSingleObject
WaitForMultipleObjects
UnhandledExceptionFilter
CloseHandle
CreateEventW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueEx
DeleteTimerQueueTimer
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
rpcrt4
UuidCreate
crypt32
CertFindCertificateInStore
CertVerifyTimeValidity
CertOpenStore
CertNameToStrW
CertGetCertificateContextProperty
CertGetCertificateChain
CertCloseStore
CertControlStore
CertFreeCertificateChain
CertFreeCertificateContext
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ