Static task
static1
Behavioral task
behavioral1
Sample
68daf1153afdcfa9345f64740d33a9fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68daf1153afdcfa9345f64740d33a9fd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68daf1153afdcfa9345f64740d33a9fd_JaffaCakes118
-
Size
173KB
-
MD5
68daf1153afdcfa9345f64740d33a9fd
-
SHA1
753320cb82401e86988b1cc0a1bcba091bfb07bc
-
SHA256
90dfd6a7b445215ced2c4d0bb54edeef4d07fcf697c87bbbfd9c704f0e96733a
-
SHA512
7511ad044b9d0c6848177da7430df4d7c32a864f3a04e187172a6a480217c510e7b5ff310158db5e333671a862842d705f1a73bee9593518ea6e3eda51ff307d
-
SSDEEP
3072:vLzlW0dlXqwCn2dmXqzVt+Y5cRk073tAostUJ+Vw5b2wHz:vNW0dhngXmVtB5cRl73Vmg+My
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68daf1153afdcfa9345f64740d33a9fd_JaffaCakes118
Files
-
68daf1153afdcfa9345f64740d33a9fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
0078910ffb1a5af130aa95ee95c48c47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExW
user32
RegisterClassExW
RegisterDeviceNotificationW
KillTimer
CreateWindowExW
SetTimer
UnregisterDeviceNotification
LoadCursorW
SendMessageW
IsWindow
DestroyWindow
DefWindowProcW
wsprintfW
shlwapi
PathAddBackslashW
PathFindExtensionW
PathRemoveExtensionW
PathGetDriveNumberW
PathFileExistsW
PathFindFileNameW
ole32
CoGetProcessIdentifier
StringFromGUID2
CoTaskMemFree
CoInitialize
GetRunningObjectTable
CoFreeUnusedLibraries
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CreateItemMoniker
kernel32
GlobalFree
GetCalendarInfoW
InterlockedCompareExchange
GetSystemDirectoryA
WideCharToMultiByte
WaitForSingleObject
GetCurrentProcess
SetCurrentDirectoryA
GetEnvironmentVariableW
GetProfileStringW
GetModuleFileNameA
TlsFree
TerminateProcess
CreateSemaphoreA
QueryPerformanceCounter
DeleteFileW
ReleaseMutex
GetFileSize
UnhandledExceptionFilter
CreateMutexA
GetCurrentDirectoryA
EnumResourceNamesA
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcmpW
TlsSetValue
GetCurrentThreadId
MultiByteToWideChar
ReadFile
InitializeCriticalSection
GlobalAlloc
lstrlenW
GlobalLock
GetTempPathW
GlobalSize
IsDebuggerPresent
ReleaseSemaphore
SetUnhandledExceptionFilter
GetProcAddress
GetWindowsDirectoryA
TlsGetValue
GetLocalTime
GlobalUnlock
RaiseException
wmvcore
WMCreateProfileManager
ddraw
DirectDrawCreateEx
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ