Static task
static1
Behavioral task
behavioral1
Sample
766a6e4a740907c3b96eb8be8884efe9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
766a6e4a740907c3b96eb8be8884efe9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
766a6e4a740907c3b96eb8be8884efe9_JaffaCakes118
-
Size
279KB
-
MD5
766a6e4a740907c3b96eb8be8884efe9
-
SHA1
a4b276ad396b841b452f307b4aed45190a12c501
-
SHA256
d5773e6293653b595444105bab049b489a59ad163c061e12fae2b705b6985acb
-
SHA512
e9204cee28972c3c8b96ac07cdb4a940716b900944ef93573143e968399a67be163bd0e6ba98f046b1191f08f509c18daa807df5532b8cfdc0a65a40feaf6b3f
-
SSDEEP
6144:vnOp4Xnk1OJ6IWJrQOfss+OsVSPD7RMZ1BCgryz0:NXna+62V2s8mZ2yyz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 766a6e4a740907c3b96eb8be8884efe9_JaffaCakes118
Files
-
766a6e4a740907c3b96eb8be8884efe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3aa852af28abe34bc909bb0944dcb4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
SHGetFolderPathW
setupapi
CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GlobalAddAtomW
LoadLibraryExW
FindFirstFileW
ReleaseMutex
ResumeThread
FindNextFileW
SetThreadPriority
CreateFileW
CreateDirectoryW
GetExitCodeThread
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
FindClose
EnumResourceLanguagesA
LoadResource
DeviceIoControl
GetCurrentProcessId
CopyFileW
GetModuleHandleA
LoadModule
OpenThread
OutputDebugStringW
GetProcAddress
GetFileAttributesW
DeleteFileW
ExitProcess
GetCommandLineW
QueryPerformanceCounter
SetPriorityClass
GetDriveTypeW
FindResourceW
advapi32
OpenProcessToken
CloseServiceHandle
SetServiceStatus
ControlService
OpenSCManagerW
RegisterEventSourceW
ReportEventW
OpenThreadToken
DeleteService
OpenServiceW
RegEnumKeyExW
DeregisterEventSource
CreateServiceW
ole32
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitializeSecurity
Sections
.text Size: 139KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ