Static task
static1
Behavioral task
behavioral1
Sample
606eed115c5538caf5df9e50b2b22170_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
606eed115c5538caf5df9e50b2b22170_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
606eed115c5538caf5df9e50b2b22170_JaffaCakes118
-
Size
277KB
-
MD5
606eed115c5538caf5df9e50b2b22170
-
SHA1
e2804480c3afee64ce484306be43a0be90f653f3
-
SHA256
0f8af9eac7d1ba8c78d0cd7b5cc053e195c2d627ebf22638e1ef1c835446d359
-
SHA512
32ba91148b1148a89a66c6342ed03c77a9ca361cb5b3f16082f1f965c9af219cf2c30d81c7091fd873307bd98507fd67d324022de77f14c6d13debfe93f0d684
-
SSDEEP
6144:jIblQpkr3TWAgS7vVtNn+KLVNm0lCr0lR5LbGw0wVOwwi:jCCA3TZgIv/tZtNG9wQi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 606eed115c5538caf5df9e50b2b22170_JaffaCakes118
Files
-
606eed115c5538caf5df9e50b2b22170_JaffaCakes118.exe windows:4 windows x86 arch:x86
023a130908383c52a0e3d587e8a46215
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptDestroyHash
CryptHashData
GetUserNameW
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
InitializeCriticalSection
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wvnsprintfW
user32
CharLowerBuffA
CloseDesktop
CloseWindowStation
DispatchMessageA
GetClassNameA
GetDlgItemTextA
GetIconInfo
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
Sections
.rwfop Size: 51KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svqf Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hitct Size: 6KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ