Static task
static1
Behavioral task
behavioral1
Sample
b3e537c2c31774412f9e72ec8bee5d2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3e537c2c31774412f9e72ec8bee5d2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3e537c2c31774412f9e72ec8bee5d2f_JaffaCakes118
-
Size
257KB
-
MD5
b3e537c2c31774412f9e72ec8bee5d2f
-
SHA1
0583ef1fa5f5f1b7cf255b94903bbf77dacd5c21
-
SHA256
76bb94cf5489e4d5cd87afd4db2e000d997ede0329f6733da8f4f81eb96539a9
-
SHA512
a052d9351bfba8b563032e65cb3995c9183a9b966aead74da71252c1faed33124ea41cdf74279c390a88163dae3b61b23e875bd369f3406d6d7272992dc58f30
-
SSDEEP
6144:pSVEU35ie3z8WoHWNNROKRLjIQHLnlQ12+mCaiCrMNafWPFN:pU5iI8DHkYEfobfPFN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3e537c2c31774412f9e72ec8bee5d2f_JaffaCakes118
Files
-
b3e537c2c31774412f9e72ec8bee5d2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
1901e2bac8be77227088eb3d097c9c95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
LoadLibraryA
lstrcmpiA
CreateEventA
GetACP
GetComputerNameA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
InitializeCriticalSection
GetTempPathA
GetCurrentThreadId
GetLocalTime
lstrlenA
lstrcpynA
GetShortPathNameA
LocalFree
GetCurrentProcess
GetLastError
FreeLibrary
MultiByteToWideChar
GetVersionExA
CreateMutexA
WaitForSingleObject
ExitProcess
QueryPerformanceCounter
GetTickCount
lstrcmpA
GetProcAddress
user32
GetSystemMetrics
CharUpperA
CharPrevA
advapi32
GetUserNameA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
dhcpsapi
DhcpAddServer
DhcpServerQueryDnsRegCredentials
DhcpSetThreadOptions
DhcpEnumMScopeClients
DhcpServerBackupDatabase
DhcpGetMScopeInfo
DhcpAddSubnetElementV4
DhcpGetThreadOptions
d3d8thk
OsThunkD3dContextDestroy
OsThunkDdFlipToGDISurface
OsThunkDdSetOverlayPosition
OsThunkDdGetInternalMoCompInfo
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.S Size: 1024B - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kQWkU Size: 4KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.klxtx Size: 5KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 94KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 121KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.h Size: 2KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ