Static task
static1
Behavioral task
behavioral1
Sample
be7323131ceabb3fbf729d1d735a6c97_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be7323131ceabb3fbf729d1d735a6c97_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be7323131ceabb3fbf729d1d735a6c97_JaffaCakes118
-
Size
211KB
-
MD5
be7323131ceabb3fbf729d1d735a6c97
-
SHA1
128c7c60cfb3b65c7bdd6d5deb31a30a74d74fc1
-
SHA256
86a464e5b861f2954850cc5eef1ca71eef4f9f744293d8c04a938e451927da46
-
SHA512
5101cb6b15d60bf6479d15aba0aadaa2a0e59266958ef448e241a50b528d3be0b9aa153b3b47ca80085b04d9f73e9fbdf551eacf05e329cf5171af3f48b8289d
-
SSDEEP
6144:Z/IbZiP0alOetvhepbJGsgO6MHN0nkCphqPCGa1n:FIqdOIVgdCuPCJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be7323131ceabb3fbf729d1d735a6c97_JaffaCakes118
Files
-
be7323131ceabb3fbf729d1d735a6c97_JaffaCakes118.exe windows:4 windows x86 arch:x86
4f90c179e13cf2cd26beb69e52a07996
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFiberEx
SetEvent
TerminateJobObject
FileTimeToSystemTime
EnumResourceNamesW
FlushFileBuffers
LocalAlloc
GetTempPathW
RaiseException
user32
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
RealGetWindowClass
PeekMessageW
advapi32
EncryptFileW
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
DecryptFileW
shlwapi
wnsprintfW
ole32
CoRegisterMessageFilter
CoTaskMemFree
CoReleaseServerProcess
CLSIDFromString
CoAddRefServerProcess
CoRevokeClassObject
CoDisconnectObject
CreateClassMoniker
CoResumeClassObjects
StringFromGUID2
CreateStreamOnHGlobal
CoRegisterClassObject
GetRunningObjectTable
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
iphlpapi
NotifyRouteChange
rpcrt4
UuidCreate
Sections
.text Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ