Static task
static1
Behavioral task
behavioral1
Sample
0641359626b7a79d4b782a68124d7e67_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0641359626b7a79d4b782a68124d7e67_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0641359626b7a79d4b782a68124d7e67_JaffaCakes118
-
Size
328KB
-
MD5
0641359626b7a79d4b782a68124d7e67
-
SHA1
3078dc7c693a7bd9c5c0bd15b22e0dc5db0a828a
-
SHA256
096af30f3d56adf55d7c5f6d06cd9c42901f671a2efef0989701d318d86485cd
-
SHA512
650f44873b3299e486a02256700d1b86c3fbb9986e2bdfa7f42494d3917213ef55b9b9d99270f3f64acecee439f823e0475599c5e776276782082cb71a9b3a7c
-
SSDEEP
6144:y8mVN72XpUls3YjpAboVA8k7viD7t0MlclVnQfq0T:r0N7+Ss39smt7aD7Nc3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0641359626b7a79d4b782a68124d7e67_JaffaCakes118
Files
-
0641359626b7a79d4b782a68124d7e67_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ddabda3734f87b05e55a5f23b2d16d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
DeregisterEventSource
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
RegisterTraceGuidsW
ReportEventW
UnregisterTraceGuids
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
kernel32
WaitForSingleObject
WaitForMultipleObjects
UnhandledExceptionFilter
CloseHandle
CreateEventW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueEx
DeleteTimerQueueTimer
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
rpcrt4
UuidCreate
crypt32
CertFindCertificateInStore
CertVerifyTimeValidity
CertOpenStore
CertNameToStrW
CertGetCertificateContextProperty
CertGetCertificateChain
CertCloseStore
CertControlStore
CertFreeCertificateChain
CertFreeCertificateContext
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ