Static task
static1
Behavioral task
behavioral1
Sample
74ff9738c83b896a62d59a660e3084ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74ff9738c83b896a62d59a660e3084ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74ff9738c83b896a62d59a660e3084ef_JaffaCakes118
-
Size
2.1MB
-
MD5
74ff9738c83b896a62d59a660e3084ef
-
SHA1
0ff3feeba96fa92a13c6339a21680901266522fa
-
SHA256
82dbe90893e81b2020086b5debd7f763b684927d836c7d8dfc629fd7c4a18963
-
SHA512
4f5626deb8e866a1ee7ce9892cc5bdc63a92b830aa374e477ed4afb20caec2b773b7451f43bb28fb9b78e97d3b36cf6a2dd1f010e916786cb2ddc132241d24e1
-
SSDEEP
49152:C3m8L+XfCHFrmFutPW9eJp6B7m9A9Fx9ny53V/MpMHP/z/Z7GD:C28L4CHFrmFutPvpQ7EoFxyLP/rto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74ff9738c83b896a62d59a660e3084ef_JaffaCakes118
Files
-
74ff9738c83b896a62d59a660e3084ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
350d0040c35918dd2247358b59955f33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTitleA
GetCommState
SetSystemTime
FindNextChangeNotification
GetProcessHeap
GlobalDeleteAtom
PeekNamedPipe
GetStringTypeExW
GetTickCount
GlobalAddAtomA
TryEnterCriticalSection
FindFirstFileW
SwitchToFiber
GetOverlappedResult
GlobalAddAtomW
SetCurrentDirectoryA
SetEndOfFile
RemoveDirectoryW
GetHandleInformation
SetThreadLocale
CompareStringW
SetCommMask
GetDiskFreeSpaceW
EnumResourceLanguagesW
GetLogicalDriveStringsA
FileTimeToLocalFileTime
FindFirstFileExW
lstrcmpiW
ScrollConsoleScreenBufferA
GetCommandLineW
PurgeComm
GetPrivateProfileSectionW
SetCommTimeouts
ExitProcess
SetErrorMode
MoveFileExA
IsDBCSLeadByteEx
LocalReAlloc
advapi32
GetSecurityDescriptorDacl
GetCurrentHwProfileW
BuildTrusteeWithSidW
CloseServiceHandle
RegSetValueW
IsTextUnicode
CryptReleaseContext
AllocateAndInitializeSid
RegQueryValueExA
CryptImportKey
RegCreateKeyW
CryptGenRandom
AbortSystemShutdownW
SetServiceStatus
GetSidSubAuthorityCount
RegUnLoadKeyW
ole32
CoFreeAllLibraries
CoImpersonateClient
StgSetTimes
CoUninitialize
version
GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA
user32
GetClipCursor
SetKeyboardState
GetMenuItemID
CharUpperA
wsprintfW
SetSysColors
LoadImageW
IsRectEmpty
AppendMenuW
GetKeyboardLayoutNameW
IsCharUpperA
RegisterDeviceNotificationW
ValidateRect
GetKeyboardState
GetWindow
TabbedTextOutW
SetClipboardViewer
msvcrt
_wmakepath
_mbsdec
strstr
time
rename
_popen
puts
bsearch
iswdigit
wcstok
fwprintf
_mbctoupper
_putenv
iswctype
swprintf
ftell
_finite
_sleep
_wspawnvp
Sections
.text Size: 5KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ