Static task
static1
Behavioral task
behavioral1
Sample
89f03a1a1589d82ac4d83eff63456680_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89f03a1a1589d82ac4d83eff63456680_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89f03a1a1589d82ac4d83eff63456680_JaffaCakes118
-
Size
209KB
-
MD5
89f03a1a1589d82ac4d83eff63456680
-
SHA1
f7ba0abfab335c8f4074d78f3af8ab6d0a59c76a
-
SHA256
65d625707f65e63a60a879840eb42e344314c89608813d4f9977205694d85257
-
SHA512
ac959c0e022075ed4cfdfe0b461bd3145f90b31c4975e2e23b48e64e2a39d4586034ad1a681ffb50049f2698da971092081310b07c2e1782bcfc2062a4d9d0cc
-
SSDEEP
6144:X4OTsSbf6MGeMT0Y0MB+KF2Kx2WMWTCrintds:XymflGeMAYBF2KYhBitds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f03a1a1589d82ac4d83eff63456680_JaffaCakes118
Files
-
89f03a1a1589d82ac4d83eff63456680_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e4b916d749a326eaef5b67032fd6745
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
winmm
timeGetTime
timeSetEvent
user32
PostThreadMessageA
GetQueueStatus
PeekMessageA
RegisterWindowMessageA
ShowWindow
DispatchMessageA
GetDC
wsprintfA
GetDesktopWindow
MsgWaitForMultipleObjects
ReleaseDC
RealGetWindowClassW
CreateDialogParamA
DestroyWindow
wvsprintfA
advapi32
CryptHashData
RegOpenKeyExA
CryptReleaseContext
RegEnumKeyExA
RegDeleteValueA
CryptDestroyHash
RegEnumValueA
CryptGetHashParam
CryptCreateHash
CryptImportKey
RegCreateKeyExA
GetUserNameA
RegQueryValueExA
CryptDestroyKey
CryptEncrypt
RegSetValueExA
RegCloseKey
kernel32
CreateFiber
GetLastError
IsBadReadPtr
VirtualFree
SetThreadContext
GetSystemTime
GetTickCount
EnumResourceNamesW
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
WaitForMultipleObjects
lstrcatA
GetACP
CreateSemaphoreA
setupapi
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ