Static task
static1
Behavioral task
behavioral1
Sample
b6dd6fa29f3807b02004db21e8832dfc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b6dd6fa29f3807b02004db21e8832dfc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6dd6fa29f3807b02004db21e8832dfc_JaffaCakes118
-
Size
195KB
-
MD5
b6dd6fa29f3807b02004db21e8832dfc
-
SHA1
c0da0d61a10e71bd8d9a08a6417c7ee4aad81257
-
SHA256
633ea9888e98dd9e016de1081352f2bea41e96eb6d1f54028b73e2ded8e9f2cb
-
SHA512
371933a452bc6a0a466be5b950fd8f299cfbf7e0e66ed55c7d48114514ae814115337fec91b84b22a3b75dcf8516d87d43a12f6fea65eeaf8ee0f5ee3274bbdc
-
SSDEEP
6144:aH0rGZsu4MkM+4LPmINmeckFQd56h9jMb:Esu4MkM+QPPmecYw5y9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6dd6fa29f3807b02004db21e8832dfc_JaffaCakes118
Files
-
b6dd6fa29f3807b02004db21e8832dfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
c4651e305f5770304c981e24d3371238
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
EncryptFileW
RegQueryValueExW
DecryptFileW
shlwapi
wnsprintfW
user32
TranslateMessage
MsgWaitForMultipleObjects
RealGetWindowClass
DispatchMessageW
PostThreadMessageW
PeekMessageW
ole32
CoRegisterClassObject
CoCreateInstance
CoResumeClassObjects
CLSIDFromString
CoInitialize
CoRegisterMessageFilter
CreateClassMoniker
CoRevokeClassObject
CoReleaseServerProcess
CreateStreamOnHGlobal
CoUninitialize
CoAddRefServerProcess
StringFromGUID2
GetRunningObjectTable
CoDisconnectObject
CoTaskMemFree
CoTaskMemAlloc
rpcrt4
UuidCreate
kernel32
CreateFiberEx
GetTempPathW
TerminateJobObject
SetEvent
EnumResourceNamesW
FlushFileBuffers
FileTimeToSystemTime
LocalAlloc
RaiseException
iphlpapi
NotifyRouteChange
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ