Static task
static1
Behavioral task
behavioral1
Sample
430ac291619388f6f0b2cee040ae9600_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
430ac291619388f6f0b2cee040ae9600_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
430ac291619388f6f0b2cee040ae9600_JaffaCakes118
-
Size
458KB
-
MD5
430ac291619388f6f0b2cee040ae9600
-
SHA1
5bbb1e26e0d9318713e9c0d35a1607aa05186349
-
SHA256
a65c99fbe7edfb487d24cd4ad4728cc15e957d2d1f76559d62966812c56de731
-
SHA512
3f718f4b1b5bb0e0d986847c379d4a19696f0c29ed7c90e2ad93991e04629f80b6ae1954d6d91a3ce1a1da6a2fbbf32222f0424505adaad772cad5b5979904dc
-
SSDEEP
6144:93CRltYeluRsZ8TMnt3blZiVtTfxfFEErWjjePFF7wb22rwW4PgXVbVGIuaGtI2O:KtDpZ6Mn1b8tT0MGEn7wbpbVVuakO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 430ac291619388f6f0b2cee040ae9600_JaffaCakes118
Files
-
430ac291619388f6f0b2cee040ae9600_JaffaCakes118.exe windows:5 windows x86 arch:x86
49fd739377fc40f3f8886c169876820b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
free
malloc
strspn
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z
atl
ord16
ord21
ord18
ord22
ord23
ord15
ord30
ord32
winscard
SCardDisconnect
SCardReleaseContext
g_rgSCardT1Pci
g_rgSCardT0Pci
SCardEndTransaction
SCardReconnect
SCardBeginTransaction
SCardStatusA
SCardFreeMemory
SCardTransmit
SCardConnectA
SCardListCardsA
SCardListInterfacesA
SCardGetProviderIdA
SCardListReadersA
SCardListReaderGroupsA
SCardEstablishContext
scarddlg
ord1
ole32
CreateStreamOnHGlobal
CoCreateFreeThreadedMarshaler
HGLOBAL_UserSize
HGLOBAL_UserMarshal
HGLOBAL_UserUnmarshal
HGLOBAL_UserFree
oleaut32
LoadRegTypeLi
SetErrorInfo
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayGetDim
SafeArrayRedim
SafeArrayGetVartype
SafeArrayDestroy
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
rpcrt4
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
kernel32
lstrlenW
GetACP
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetLastError
GlobalLock
GlobalReAlloc
GlobalUnlock
InitializeCriticalSection
GlobalAlloc
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ