Static task
static1
Behavioral task
behavioral1
Sample
bded749e1eefaee8b0115110734dd5e3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bded749e1eefaee8b0115110734dd5e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bded749e1eefaee8b0115110734dd5e3_JaffaCakes118
-
Size
292KB
-
MD5
bded749e1eefaee8b0115110734dd5e3
-
SHA1
55a193b36011b068cf48af353b73d8c2f09ea409
-
SHA256
4fa09ee413045ee4b0fe5ae06bc7754815c61a7c4ad5bdac67d3209cf3dccb0b
-
SHA512
00b8aa84032d6e3f05a9334a6527b887f29c89c538552a5bf8e94a40456ca41471241ac1f0ae75405ac350e56aa0ca92a2aed3d7e2035830b166c71da5f83e51
-
SSDEEP
6144:Be2+6SHY3tHuO36O+taiQYyWsoSAUsPildwqFE/c:BH+dYtu4K6oSLldhZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bded749e1eefaee8b0115110734dd5e3_JaffaCakes118
Files
-
bded749e1eefaee8b0115110734dd5e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
3294a59a609a530fdd2d1858ace6bec7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
DeleteFileA
WriteConsoleW
WriteConsoleW
lstrlenW
GetProcessHeap
GetDriveTypeW
GetStartupInfoA
HeapDestroy
GetPrivateProfileSectionW
lstrcpyA
VirtualProtect
Sleep
GetModuleHandleA
VirtualQueryEx
GetCommandLineA
GetStdHandle
WriteConsoleW
ResumeThread
GetFileAttributesW
CopyFileA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
cryptui
WizardFree
DllUnregisterServer
CryptUIWizExport
CryptUIWizBuildCTL
LocalEnrollNoDS
CryptUIDlgViewContext
LocalEnroll
DllRegisterServer
LocalEnroll
CryptUIStartCertMgr
WizardFree
CryptUIWizImport
CryptUIWizDigitalSign
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ