Static task
static1
Behavioral task
behavioral1
Sample
f60e69f4fe54af479b75c1d19984c9da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f60e69f4fe54af479b75c1d19984c9da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f60e69f4fe54af479b75c1d19984c9da_JaffaCakes118
-
Size
51KB
-
MD5
f60e69f4fe54af479b75c1d19984c9da
-
SHA1
bf47ce783c9353a4a2f32cb6086da6e27c9afbc4
-
SHA256
0d20bcee5108103e5ba29ed6794945847ce5e125359368f29af5620cb87a6ffd
-
SHA512
ed44c7a4e90e8da93c3a450f2b4f833754b8d9e0e586ccfab734be57017d1a063ec13d7e0bc3108b73bafe2ac5bc7ca0fddc533b0bbcc01bdf5e060cc988c2b7
-
SSDEEP
1536:uoUCrg6eTyyOfCeXJ+z5KE+0+19Vuiw//kOqp:UUe+RfxXJ+FKE+LI9/Sp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f60e69f4fe54af479b75c1d19984c9da_JaffaCakes118
Files
-
f60e69f4fe54af479b75c1d19984c9da_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fc60cd1fb2b61a63a581335e2a69fa1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptAcquireContextW
CryptDestroyHash
GetUserNameW
RegCreateKeyExA
RegSetValueExA
kernel32
InitializeCriticalSection
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wvnsprintfA
user32
EndDialog
GetDlgItemTextA
GetMessageA
GetWindowLongA
MsgWaitForMultipleObjects
OpenDesktopA
Sections
.gravgd Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ehwt Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ynipix Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ