Overview
overview
3Static
static
3root.exe
windows7-x64
1root.exe
windows10-2004-x64
1src/JWaWinBase.js
windows7-x64
3src/JWaWinBase.js
windows10-2004-x64
3src/JwaWinSvc.js
windows7-x64
3src/JwaWinSvc.js
windows10-2004-x64
3src/JwaWinType.js
windows7-x64
3src/JwaWinType.js
windows10-2004-x64
3src/afxCodeHook.js
windows7-x64
3src/afxCodeHook.js
windows10-2004-x64
3src/hook.js
windows7-x64
3src/hook.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
root.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
root.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
src/JWaWinBase.js
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
src/JWaWinBase.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
src/JwaWinSvc.js
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
src/JwaWinSvc.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
src/JwaWinType.js
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
src/JwaWinType.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
src/afxCodeHook.js
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
src/afxCodeHook.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
src/hook.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
src/hook.js
Resource
win10v2004-20240611-en
General
-
Target
169eb5c235410d76a94570732bd1109d_JaffaCakes118
-
Size
266KB
-
MD5
169eb5c235410d76a94570732bd1109d
-
SHA1
fed5803e146a85591b41ed80012b0cef373b809c
-
SHA256
f33c534c5cf6e94479040c1f574b66f6e5613ad714a0905192ebbdc21eee20c7
-
SHA512
4c5f4af91a4d4ba146ce09c896b9472ec77cbbe7f67b724eb65d89937b9d7c72045b2d6c64fa15018b53d06d5c6fd3f235b295b2df40508622bba21697c1052f
-
SSDEEP
6144:GzAmz2ucHq6q49Orh0ga+t3CrfzemE6TqAA+z3h3PmqVUUv5drWHx9c:tmz/1YAigxorqFQzFP3yq5dWxq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/root.exe
Files
-
169eb5c235410d76a94570732bd1109d_JaffaCakes118.zip
-
ReadMe.txt
-
root.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
src/JWaWinBase.pas.js
-
src/JwaNtStatus.pas
-
src/JwaWinNT.pas
-
src/JwaWinSvc.pas.js
-
src/JwaWinType.pas.js
-
src/Native.pas
-
src/WinDefines.inc
-
src/afxCodeHook.pas.js
-
src/hook.cfg
-
src/hook.dof
-
src/hook.dpr.js
-
src/root.cfg
-
src/root.dof
-
src/root.dpr
-
src/rsrc.rc