Static task
static1
Behavioral task
behavioral1
Sample
890fdefa1b80b4075516406f4606664a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
890fdefa1b80b4075516406f4606664a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
890fdefa1b80b4075516406f4606664a_JaffaCakes118
-
Size
324KB
-
MD5
890fdefa1b80b4075516406f4606664a
-
SHA1
8a736cd0213b7c776bb3d1f5d2b69cb69a4f3994
-
SHA256
c225f47e087cb8d15b80c570e4db2a8d5e092db06784d48bdb0678af49e4ffd7
-
SHA512
cc71f1ed869beefc6b2f535b11c441c0fc6889f415e984e4c2eacd69d96c249486aba377c371db556462add8925caba024eba30f86e6319d2d52e8ec70d5ea18
-
SSDEEP
6144:fM2M5abhufAzuNZDYF/t4NDYEf63m3piqZgn5EwD6U0T:fMktufAzuNZDYX4U3m3pN25E7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 890fdefa1b80b4075516406f4606664a_JaffaCakes118
Files
-
890fdefa1b80b4075516406f4606664a_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ddabda3734f87b05e55a5f23b2d16d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
DeregisterEventSource
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
RegisterTraceGuidsW
ReportEventW
UnregisterTraceGuids
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
kernel32
WaitForSingleObject
WaitForMultipleObjects
UnhandledExceptionFilter
CloseHandle
CreateEventW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueEx
DeleteTimerQueueTimer
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
rpcrt4
UuidCreate
crypt32
CertFindCertificateInStore
CertVerifyTimeValidity
CertOpenStore
CertNameToStrW
CertGetCertificateContextProperty
CertGetCertificateChain
CertCloseStore
CertControlStore
CertFreeCertificateChain
CertFreeCertificateContext
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ