Static task
static1
Behavioral task
behavioral1
Sample
95ad4d7c0f6b90cdaf3bb7150204e92f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95ad4d7c0f6b90cdaf3bb7150204e92f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95ad4d7c0f6b90cdaf3bb7150204e92f_JaffaCakes118
-
Size
404KB
-
MD5
95ad4d7c0f6b90cdaf3bb7150204e92f
-
SHA1
a3a06428a354e0aac93748e85eba08109d382001
-
SHA256
4f1b8f5084b9e48bffa47b1e764dec2fc093f08e65205ce0547b0039242d99c5
-
SHA512
5bc5bfdb7fd4a63bf4f0807248a7eb624edff40b47199329ee27d91d650de4bfed0c36dbe6e1a7a62d1d39595a772d2cc0b5597b37ef11b7ef0b62414a201fa5
-
SSDEEP
12288:oAuJ6/fGsWd9+fO17rs8+7bBGtrQ2XIgB:/Ha7uer097I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95ad4d7c0f6b90cdaf3bb7150204e92f_JaffaCakes118
Files
-
95ad4d7c0f6b90cdaf3bb7150204e92f_JaffaCakes118.exe windows:5 windows x86 arch:x86
f2f212ef59607115ca046ec2e8b8b2f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
QueryPerformanceCounter
GetFileTime
FormatMessageW
RaiseException
GlobalFix
SetCurrentDirectoryW
GetACP
user32
FindWindowW
IsWindowEnabled
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW
crypt32
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore
shell32
SHGetFolderPathW
ole32
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoQueryProxyBlanket
gdi32
DeleteObject
SelectObject
StretchBlt
GetDIBColorTable
SetDIBColorTable
GetObjectW
odbc32
SQLFreeStmt
Sections
.text Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ