Static task
static1
Behavioral task
behavioral1
Sample
774c04cb4b554d3650c5637637b1ef13_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
774c04cb4b554d3650c5637637b1ef13_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
774c04cb4b554d3650c5637637b1ef13_JaffaCakes118
-
Size
60KB
-
MD5
774c04cb4b554d3650c5637637b1ef13
-
SHA1
a4223e0e6f3bf6411d8dcccb7142d2c3808900b8
-
SHA256
e50c55addf7146ff5019a49b82ed31c9adb404b49e907664a67083f26eabaa6d
-
SHA512
b0558b163c4b66c85796f140226218e8845e998dba6ec8d7cc799463ca4badb51f79c7dd0801dbf08c2975c29ac923f8f5a00c37cb9b09825aa7473c18c75765
-
SSDEEP
768:RubiKkXJnheAqafx3OLmzfXi4EE1t3hLJjYA4RBPD37Zoz85o:sbXkXZ8GXj35J2RBPz7Zro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 774c04cb4b554d3650c5637637b1ef13_JaffaCakes118
Files
-
774c04cb4b554d3650c5637637b1ef13_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac5abe5f1080cddb5ca04b9c0159334e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetCurrentThreadId
lstrlenA
Sleep
CloseHandle
TerminateProcess
OpenProcess
GetTickCount
GetLastError
CreateMutexA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
EnterCriticalSection
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
HeapReAlloc
GetEnvironmentStringsW
InitializeCriticalSection
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
LCMapStringA
SetStdHandle
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetCurrentProcess
InterlockedIncrement
HeapFree
VirtualFree
HeapCreate
UnhandledExceptionFilter
IsBadWritePtr
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetDriveTypeA
GetVersion
GetCurrentDirectoryA
HeapDestroy
user32
SetThreadDesktop
CreateDesktopA
PostMessageA
IsWindow
MoveWindow
SetWindowLongA
FindWindowExA
WaitForInputIdle
EnumDesktopWindows
GetWindowTextA
GetParent
GetClassNameA
GetWindowLongA
GetThreadDesktop
GetWindowThreadProcessId
CreateWindowExA
SetTimer
GetMessageA
KillTimer
TranslateMessage
DispatchMessageA
DestroyWindow
CloseDesktop
advapi32
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoGetClassObject
oleaut32
SysAllocStringLen
SysFreeString
VariantCopy
VariantChangeType
VariantClear
iphlpapi
GetIpForwardTable
Sections
.CryptX Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CryptX Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CryptX Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE