Static task
static1
Behavioral task
behavioral1
Sample
ff052335085203e80a4b30e4879236af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ff052335085203e80a4b30e4879236af_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ff052335085203e80a4b30e4879236af_JaffaCakes118
-
Size
183KB
-
MD5
ff052335085203e80a4b30e4879236af
-
SHA1
9268a305518304cf0de7137f43b23fa652ee7cfc
-
SHA256
da30bd2e9d5cfd7cd02fcc2cab76441af2cf537093a9df813165195fb935557c
-
SHA512
cb7a661f890d9a2817e44bbe2c5b7064cf540b63360922cee9aab85b084c75deb3732bf6ee543533e17a250c956af1fd77f3376cd427fb9bdfa0785182eace66
-
SSDEEP
3072:Om2+ujpCZKKQrPOxFsa0oiv0UxotgjwD1yebJrdUlwaJ2dkrwmLDzilrC3/VC:w+QOKK4O3Ni0OotzD1yebNdkDJ2SrpLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff052335085203e80a4b30e4879236af_JaffaCakes118
Files
-
ff052335085203e80a4b30e4879236af_JaffaCakes118.exe windows:4 windows x86 arch:x86
16ece33158511b2aff463657fb5e245e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
ole32
StringFromIID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
VirtualQueryEx
ExitProcess
GetCurrentProcessId
InterlockedCompareExchange
RaiseException
GetModuleHandleA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
WideCharToMultiByte
InterlockedExchange
GetEnvironmentVariableA
MultiByteToWideChar
lstrlenW
LocalAlloc
EnumResourceNamesW
GetTickCount
CreateProcessA
QueryPerformanceCounter
GetCurrentThreadId
IsDebuggerPresent
Sleep
GetCPInfoExW
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
GetLocaleInfoA
GetACP
lstrlenA
GetThreadLocale
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ