Static task
static1
Behavioral task
behavioral1
Sample
3330067b77daeee9aed6e32838817906_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3330067b77daeee9aed6e32838817906_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3330067b77daeee9aed6e32838817906_JaffaCakes118
-
Size
818KB
-
MD5
3330067b77daeee9aed6e32838817906
-
SHA1
2535bf68d0b94714694619200e85bbc0a447303e
-
SHA256
21092368321e86c7fd636e202ddb20e4cbd1b68357776bb77a709a2bf26946d8
-
SHA512
5ee8386859a4cde7af1b26747d407c68c9ceb54b2fb93ccdbdf9d0e10c930d223677b8e8d81eb2254c434076efbaca8a53bf511e9236243aabae9ad2487374a2
-
SSDEEP
24576:vRMyRB5ASWwiSZpC0t2E1fp6PnYF1Bl3WoB:vRMyLiSPiMC8v1fpAnKXl3z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3330067b77daeee9aed6e32838817906_JaffaCakes118
Files
-
3330067b77daeee9aed6e32838817906_JaffaCakes118.exe windows:4 windows x86 arch:x86
3df6b80fb859d4268d9ce07d347d308c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
WriteFile
InterlockedExchange
lstrlenA
ResetEvent
CreateMutexA
CloseHandle
LocalFree
GetModuleHandleW
VirtualAlloc
GetACP
GetExitCodeProcess
GlobalSize
CreateEventA
GetStdHandle
GetEnvironmentVariableW
GetPrivateProfileIntW
GetCommandLineA
FindVolumeClose
GlobalFree
advapi32
CreateServiceA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExW
CloseEventLog
RegEnumKeyW
RegDeleteValueA
RegQueryValueW
ClearEventLogA
ControlService
IsValidSid
IsTextUnicode
IsValidAcl
amstream
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 809KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ