Static task
static1
Behavioral task
behavioral1
Sample
64094f4b2078fdaa79a6a72646eda7ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64094f4b2078fdaa79a6a72646eda7ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64094f4b2078fdaa79a6a72646eda7ce_JaffaCakes118
-
Size
385KB
-
MD5
64094f4b2078fdaa79a6a72646eda7ce
-
SHA1
1b26307e5d2d844460d06f215b296af0c7bc858e
-
SHA256
30d431f7719f8940453343b496dd509be45faf950a0a2809b0f7448d45ec2251
-
SHA512
327f31bf61b529065b4272f92fc4c9dd7701ecc18f3191f5b9d649a7b5387499977d93ebf8ff69f6415cd6b98d0ef2514d875a1ba63c816355ada7d61f68f475
-
SSDEEP
6144:JxcgQBOi1KGZ7Njs4WO3uimJhBiX8zTM3zrKAO22j:LxQv1PhNjsiDMkzrT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64094f4b2078fdaa79a6a72646eda7ce_JaffaCakes118
Files
-
64094f4b2078fdaa79a6a72646eda7ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
981cd1e4cc53132fbc64ab484c2d12bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetEnvironmentVariableW
GetExitCodeProcess
GetCommandLineA
CreateMutexA
GlobalFree
ResumeThread
FindVolumeClose
GetModuleHandleW
InterlockedExchange
ResetEvent
lstrlenA
GlobalSize
GetPrivateProfileIntW
CreateEventA
CloseHandle
WriteFile
LocalFree
VirtualAlloc
GetACP
advapi32
LsaClose
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
ClearEventLogA
IsValidSid
IsValidAcl
IsTextUnicode
RegDeleteValueA
RegCreateKeyExA
ControlService
CreateServiceA
mspatcha
GetFilePatchSignatureA
GetFilePatchSignatureA
ApplyPatchToFileA
GetFilePatchSignatureA
GetFilePatchSignatureA
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ