Static task
static1
Behavioral task
behavioral1
Sample
708ef017495017ea9fb627e2fe76a0ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
708ef017495017ea9fb627e2fe76a0ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
708ef017495017ea9fb627e2fe76a0ef_JaffaCakes118
-
Size
169KB
-
MD5
708ef017495017ea9fb627e2fe76a0ef
-
SHA1
570b21d54cc87284726532d7a6581a655e632bf8
-
SHA256
d5584bef5dc58fe9f7a54ccedf7972030211efef78b62c2ecb175b8b2962a53d
-
SHA512
f1b5881906412c945f3a1e2503576487e006d4445facc1a07895f1fc4bf4ef9aa68c405319b5461a7ce279009a5015f73d33fd4015274d5730f9db4de37b4ee5
-
SSDEEP
3072:IK+5h1sbgrwaIAzEwXU6rOL9S582Ymd8JZ/89VQCcCZinF0O/T0VbqJI:hYmYywEIE9wsX/cXZZoTgJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 708ef017495017ea9fb627e2fe76a0ef_JaffaCakes118
Files
-
708ef017495017ea9fb627e2fe76a0ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f1dd3871cde0ade05d9ae9134d3063d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
lz32
LZCopy
LZClose
LZOpenFileA
kernel32
GetTempFileNameA
DeviceIoControl
Sleep
GetTickCount
CopyFileA
GetCurrentProcessId
AddAtomW
DisableThreadLibraryCalls
WaitForSingleObject
CreateFileA
GetSystemTimeAsFileTime
GlobalUnlock
QueryPerformanceCounter
SetFilePointer
GetFileSize
GlobalFree
InterlockedIncrement
GetLastError
MultiByteToWideChar
SetFileAttributesA
EnumResourceNamesA
VirtualAlloc
CreateMutexA
GetVolumeInformationA
GetModuleFileNameA
CloseHandle
ReleaseMutex
LocalAlloc
GetSystemTime
WideCharToMultiByte
CreateFileW
DeleteFileA
WriteFileGather
DeleteCriticalSection
CreateDirectoryA
GetModuleFileNameW
LocalFree
VirtualFree
ReadFile
InterlockedDecrement
GlobalLock
GetFileAttributesA
GetTempPathA
GetVersionExA
InitializeCriticalSection
GetCurrentThreadId
lstrlenA
FreeLibrary
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 92KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ