Static task
static1
Behavioral task
behavioral1
Sample
48c1032ea964655a3e6ea2b6627e4947_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48c1032ea964655a3e6ea2b6627e4947_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48c1032ea964655a3e6ea2b6627e4947_JaffaCakes118
-
Size
328KB
-
MD5
48c1032ea964655a3e6ea2b6627e4947
-
SHA1
8294012839067b85011cbf6cf9f9cb2d67ed62be
-
SHA256
04636ce7796bde2e5091a096c59a4277c339d24720b253764fc24c1a8ed3f8ec
-
SHA512
afb5af9b38df8ec1562caf21bbe6c2f2d36a2785726394eb7f2c0ce21243fc4db872d17848fe730e9703325edc3c35644352bfbc6e0dab1af954131a69b53ae5
-
SSDEEP
6144:7oFka8rc46BE/h4gqyg7Rw2Bw3CPRtTNbMamoHDBCwd0T:wZ811h4TL7Rw2HtVmsBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c1032ea964655a3e6ea2b6627e4947_JaffaCakes118
Files
-
48c1032ea964655a3e6ea2b6627e4947_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ddabda3734f87b05e55a5f23b2d16d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
DeregisterEventSource
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
RegisterTraceGuidsW
ReportEventW
UnregisterTraceGuids
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
kernel32
WaitForSingleObject
WaitForMultipleObjects
UnhandledExceptionFilter
CloseHandle
CreateEventW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueEx
DeleteTimerQueueTimer
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
rpcrt4
UuidCreate
crypt32
CertFindCertificateInStore
CertVerifyTimeValidity
CertOpenStore
CertNameToStrW
CertGetCertificateContextProperty
CertGetCertificateChain
CertCloseStore
CertControlStore
CertFreeCertificateChain
CertFreeCertificateContext
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ