Static task
static1
Behavioral task
behavioral1
Sample
83f8b48ca36f4d4ffcf08d24a7f4c2cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83f8b48ca36f4d4ffcf08d24a7f4c2cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83f8b48ca36f4d4ffcf08d24a7f4c2cc_JaffaCakes118
-
Size
324KB
-
MD5
83f8b48ca36f4d4ffcf08d24a7f4c2cc
-
SHA1
cdaed9417764ad2d06a28aea83536b235b6155fd
-
SHA256
c741f2ea30d9285f5eb6fdbc3a91e1df89d25fbb7422decee8303b06258dd9b5
-
SHA512
52f4208448b94c5fe48c136ba258323d780efdceab2315ac2521492f7d42eed8c1bdf2f0bb5cc03fd50140a17285b1587daf463e4fb35cb177aee941dd6c0426
-
SSDEEP
6144:rs6elGaqJWHocS7Nbl0RXtaB3P4GuAx16uBCv+ZuU:rsj8XJ0oDr0RXC4Gp1pCvax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83f8b48ca36f4d4ffcf08d24a7f4c2cc_JaffaCakes118
Files
-
83f8b48ca36f4d4ffcf08d24a7f4c2cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
4351467b65e5a3301f5b2ccdadb81b0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcStringFreeW
advapi32
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
kernel32
SizeofResource
GetStartupInfoA
lstrcpynW
InterlockedDecrement
DisableThreadLibraryCalls
MultiByteToWideChar
lstrcpyW
lstrcmpiW
FindResourceW
HeapDestroy
lstrcatW
lstrlenA
InitializeCriticalSection
InterlockedIncrement
EnterCriticalSection
GetModuleFileNameW
lstrlenW
FreeLibrary
LeaveCriticalSection
LoadLibraryExW
LoadResource
GetLastError
oleaut32
VariantClear
msvcrt
wcsncpy
wcsncat
_adjust_fdiv
_purecall
realloc
__CxxFrameHandler
_except_handler3
_initterm
wcslen
wcscpy
free
malloc
user32
CharNextW
ntdll
RtlAddAccessAllowedAce
NtAllocateVirtualMemory
RtlAdjustPrivilege
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE