Static task
static1
Behavioral task
behavioral1
Sample
d517937b12c1a76d67795a3598547145_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d517937b12c1a76d67795a3598547145_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d517937b12c1a76d67795a3598547145_JaffaCakes118
-
Size
578KB
-
MD5
d517937b12c1a76d67795a3598547145
-
SHA1
0e586d31c1f924b541c7a7fdc1bab8ec6852ba2e
-
SHA256
7ee0a7d64e61903f57620f0be96cb94a0bd561451f744940694534eabaf2c1b3
-
SHA512
c760242de2738e924c72e005771291fa63c1aa73348c4bdb599d8449dc56e73087920e618c640d259195ad4acfe671c3a82edfd27175624c3fd02ce5793f8e5f
-
SSDEEP
384:c1j4yTyqmdrLPAN1389yqEMMo+Dm0WtOmwI/63GEb7B6n24u6bicH2OV5n5L9nEm:dAadusI/dC0SxwI/63GE/6TbDf55qRi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d517937b12c1a76d67795a3598547145_JaffaCakes118
Files
-
d517937b12c1a76d67795a3598547145_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ede7ec9c4930d01c8ed9a112c4912c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateThread
GetSystemDirectoryA
GetVersionExA
TerminateProcess
TerminateThread
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetErrorMode
GetCommandLineA
InitializeCriticalSection
GetModuleHandleA
GetStartupInfoA
Sleep
SuspendThread
GetTempPathA
GetVersion
CreateProcessA
GetModuleFileNameA
GetTickCount
ExitProcess
GetSystemTimeAsFileTime
advapi32
RegCreateKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
msvcrt
memset
memcpy
??2@YAPAXI@Z
fwrite
strchr
_except_handler3
strlen
strcpy
strstr
time
strncpy
strncmp
atol
strcat
fprintf
sprintf
sscanf
exit
vsprintf
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
fopen
atoi
fclose
strcmp
??3@YAXPAX@Z
_snprintf
_stricmp
_access
ws2_32
Sections
.text Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE