Static task
static1
Behavioral task
behavioral1
Sample
20c631c080c80e4605a5b390e17cff88_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20c631c080c80e4605a5b390e17cff88_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
20c631c080c80e4605a5b390e17cff88_JaffaCakes118
-
Size
1.1MB
-
MD5
20c631c080c80e4605a5b390e17cff88
-
SHA1
59c88ace86fa433b3f5e02b1265beb75cf9834cc
-
SHA256
96d73e0de520edad06a58a47f33a4271859222068ee2a29883c9a060ae0d6b0c
-
SHA512
f8dddf4e08e7499f93a127720723bd7ccd9db5d7dfb331f8c297ceebd08226aa1221429185fe018a29096ea1b86a2a0250bce4ecc224f8ffac7c7bef4fad8892
-
SSDEEP
12288:N5Re0S4Elp9tt1I6ENIUCjrknvlVs1w7iA3WDBXltDyX5fVTc10WHKO7h48NHJoO:NfXiLChN4Qvbf7iAgB1ANYBG2Ai
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20c631c080c80e4605a5b390e17cff88_JaffaCakes118
Files
-
20c631c080c80e4605a5b390e17cff88_JaffaCakes118.exe windows:4 windows x86 arch:x86
64a6eb6200a7b214d3a5a8a5d3e4309c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegQueryValueW
RegSetValueW
kernel32
CreateThread
ExitProcess
LeaveCriticalSection
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
memset
signal
strcpy
wcscpy
user32
BeginPaint
CheckMenuItem
CreatePopupMenu
CreateWindowExW
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DrawIcon
EnableMenuItem
GetClassInfoW
GetClipboardFormatNameW
GetMessageTime
HideCaret
InvalidateRect
IsWindowEnabled
LoadImageW
PostQuitMessage
RedrawWindow
RegisterClipboardFormatW
SetMenuItemInfoW
SetParent
SystemParametersInfoW
UpdateWindow
ValidateRect
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 858KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ