Static task
static1
Behavioral task
behavioral1
Sample
61ca33ea7e395521d7dcfb0cbf185d58_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61ca33ea7e395521d7dcfb0cbf185d58_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61ca33ea7e395521d7dcfb0cbf185d58_JaffaCakes118
-
Size
232KB
-
MD5
61ca33ea7e395521d7dcfb0cbf185d58
-
SHA1
03457fcf8c45f40f805b1476ba8957fae5db2582
-
SHA256
41b25953ea50dca7d3313df47cec918bf69ac48431707ddf9391c5c169cb1365
-
SHA512
914c2007e73ebd3dbd3f42e212833bf0c605317afca891cda353787e3af71efe1a98d496238aa6925ae5fbe0fa46a668facbd61664dcf82e41aeab4e726de410
-
SSDEEP
3072:atdVZXOaibQ36ZZKwtdVZXOaibQ36FLisI4dd5+yRHdwlHXn222GA:at5idt5iligJHiXH2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61ca33ea7e395521d7dcfb0cbf185d58_JaffaCakes118
Files
-
61ca33ea7e395521d7dcfb0cbf185d58_JaffaCakes118.exe windows:5 windows x86 arch:x86
4a54b00f79f3de168e9913b2c7323997
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
GetSystemDirectoryW
LoadLibraryA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetStartupInfoA
CreateFiber
QueryPerformanceCounter
GetTickCount
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CopyFileExW
GetCurrentThreadId
VirtualAlloc
GetCurrentProcessId
GetLastError
GetProcAddress
SetUnhandledExceptionFilter
advapi32
RegOpenKeyA
LsaQueryInformationPolicy
RegCreateKeyExW
RegCloseKey
RegSetValueExW
StartTraceA
TrusteeAccessToObjectW
RegQueryValueExA
RegDeleteKeyW
RegSetValueExA
RegQueryValueExW
RegCreateKeyExA
UpdateTraceW
RegOpenKeyExW
WmiDevInstToInstanceNameA
RegOpenKeyExA
TreeResetNamedSecurityInfoA
Sections
.textbss Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ