Static task
static1
Behavioral task
behavioral1
Sample
66c2ce11b3636ee5f3ed0192f50ee19d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
66c2ce11b3636ee5f3ed0192f50ee19d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
66c2ce11b3636ee5f3ed0192f50ee19d_JaffaCakes118
-
Size
2.0MB
-
MD5
66c2ce11b3636ee5f3ed0192f50ee19d
-
SHA1
2afa665e2d4c2638cdede1ea2e9927ef8f9c4b58
-
SHA256
cd835337d63770d64b22847ce303efbeeeae7e08b9894e20d71632bc828b139c
-
SHA512
ec0fff72e69dc2e23a926013edd1fcaeab3afa06f3db6ba983ed1e86f081b3190b89975d7f39c567b2868236c87b1615be85edbae374119efb0e9d1ed345cb06
-
SSDEEP
49152:vKKzKtoceRyBrtvVfMe401oLpUOvys5Oj:vHK2o9z40ClUOvyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 66c2ce11b3636ee5f3ed0192f50ee19d_JaffaCakes118
Files
-
66c2ce11b3636ee5f3ed0192f50ee19d_JaffaCakes118.exe windows:5 windows x86 arch:x86
488032e647e8282af119a49b03da5f73
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
SetLastError
WideCharToMultiByte
GetVersion
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
SetErrorMode
CreateFileA
GetExitCodeThread
GetDriveTypeW
FindResourceW
ExpandEnvironmentStringsW
EnterCriticalSection
DeviceIoControl
DebugBreak
CreateThread
QueryDosDeviceW
LoadResource
LoadLibraryW
LoadLibraryExW
LeaveCriticalSection
GetFileAttributesW
GetWindowsDirectoryW
CreateFileW
VirtualAlloc
user32
CharLowerW
CountClipboardFormats
GetInputState
GetWindowContextHelpId
GetSysColor
WindowFromDC
GetWindowTextLengthW
CloseClipboard
VkKeyScanA
OpenIcon
GetMessageTime
gdi32
AbortDoc
GetTextCharset
GetPolyFillMode
CloseEnhMetaFile
UpdateColors
AddFontResourceA
advapi32
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
TraceMessage
RegQueryValueExA
RegOpenKeyW
RegCreateKeyExW
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ