Static task
static1
Behavioral task
behavioral1
Sample
35bf61077eae8444e36abf6059386360_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35bf61077eae8444e36abf6059386360_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35bf61077eae8444e36abf6059386360_JaffaCakes118
-
Size
82KB
-
MD5
35bf61077eae8444e36abf6059386360
-
SHA1
8138555edb5d111e569a569fa51cc3abc1b7d4d2
-
SHA256
d993737f72ee49d76e931e614d2a6f9d2982069f225696e4b45fc311dd5f3fe1
-
SHA512
657b506fd5050e144425dcd2d2bc44c5d6628b27e444d7a1330a889ebbe6a2cad1dabc1e829ad879795c7185889933fb630966a231d7c1bec3b8077212257a64
-
SSDEEP
1536:qOGtQ4iCfdfNXtS6LW+81SMZw8irKNYY2OIDrHrtE8E3n:fGG6fNXtS6LWTJ3i+GhDrLeP3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35bf61077eae8444e36abf6059386360_JaffaCakes118
Files
-
35bf61077eae8444e36abf6059386360_JaffaCakes118.exe windows:4 windows x86 arch:x86
9148575b8fc13c5b9ec8a41ddc2d2a7d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryExA
WaitForSingleObjectEx
GetStartupInfoW
LoadLibraryExA
GetSystemTime
GetStartupInfoW
WriteProcessMemory
ReadProcessMemory
TerminateProcess
SleepEx
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
SetThreadPriority
VirtualProtect
LoadLibraryExA
WriteProcessMemory
DeviceIoControl
VirtualProtect
Sleep
LoadLibraryExA
LoadLibraryA
VirtualProtectEx
LoadLibraryA
credui
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIReadSSOCredA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
Sections
.text Size: 73KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ