Static task
static1
Behavioral task
behavioral1
Sample
a876e3afe76dec729de810f4110f9877_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a876e3afe76dec729de810f4110f9877_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a876e3afe76dec729de810f4110f9877_JaffaCakes118
-
Size
640KB
-
MD5
a876e3afe76dec729de810f4110f9877
-
SHA1
d465504e258440f3c13d9b691bd9f761ef73006c
-
SHA256
613948eba26190b11250c6ce115f1c99712f79d5234269354a32d6052a873fbf
-
SHA512
e20417af913c2f3d4fdb0b8a01ca4086ce8f8232f5ab0890a77cd40519b15dc56e102d3a64cd48195fd6b85a7346c5235864dd753291d0449206dc433e8b116f
-
SSDEEP
12288:53c3zZfZfZfZfZfZfZmZ2XsHUKwbNWuTncBxPMRS8SUC9H4jlNEz9vBiptAE43/A:2jZfZfZfZfZfZfZmZ2XsHUK8ni0U8SUD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a876e3afe76dec729de810f4110f9877_JaffaCakes118
Files
-
a876e3afe76dec729de810f4110f9877_JaffaCakes118.exe windows:5 windows x86 arch:x86
ed36d6b5bc2364ec85cc07421435bb85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
nddeapi
NDdeShareAddA
NDdeShareDelA
NDdeShareGetInfoA
kernel32
GetModuleFileNameA
lstrcmpiA
GetDateFormatA
GetModuleHandleW
GetProcAddress
CreateMailslotW
GetLogicalDriveStringsW
ReadConsoleW
WaitForSingleObject
InitializeCriticalSection
LoadLibraryA
GetConsoleAliasA
GetFileAttributesW
DeleteFileW
SearchPathA
GetACP
GetCommandLineA
CreateFileMappingA
SetErrorMode
advapi32
RegEnumKeyA
RegReplaceKeyW
RegUnLoadKeyA
OpenEventLogA
ClearEventLogW
RegLoadKeyA
LogonUserW
RegCreateKeyExW
InitializeAcl
CryptSignHashW
ControlService
RegDeleteValueA
RegOpenKeyA
shell32
FindExecutableW
SHGetFileInfoW
StrStrA
StrChrW
ShellAboutW
ExtractIconW
SHGetFolderPathA
DllRegisterServer
SHCreateShellItem
SHFree
user32
GetClassLongW
LoadBitmapW
CreateDesktopA
wsprintfA
PostMessageA
GetDlgItemTextW
IsDialogMessageA
DispatchMessageW
GetMessageA
LoadMenuA
LoadStringA
LoadIconW
DialogBoxParamA
CharToOemA
DrawStateA
InsertMenuW
GetPropW
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 553KB - Virtual size: 553KB
IMAGE_SCN_MEM_READ