Static task
static1
Behavioral task
behavioral1
Sample
036b77cf58213fe937df60a75b11ea61_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
036b77cf58213fe937df60a75b11ea61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
036b77cf58213fe937df60a75b11ea61_JaffaCakes118
-
Size
302KB
-
MD5
036b77cf58213fe937df60a75b11ea61
-
SHA1
47d1b9823ae5ac0ad5e0f9c0e452ca004346bbd1
-
SHA256
a40daf8d754ea4c6a14d253f32ca7ab33b18ed0e3157fe9b7cc2696ef1a9fd60
-
SHA512
5932682dc833543c2662e24f838fb7f69e5aedf4b760571940550dd072f7ffc86aaef92c13e7e0de3d0b02507cb4d65b7f35812eaf812ae2e65137ea91bec0fc
-
SSDEEP
6144:p5/l1CSa0zygx/jPSaPNQ0k7dtQOXm/Mtt2t6pTJQbjNRng6:pTjyeqcifPQu0J04/NFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 036b77cf58213fe937df60a75b11ea61_JaffaCakes118
Files
-
036b77cf58213fe937df60a75b11ea61_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6c19ff6263cbfd25d0538625f84873e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
ReadFile
GetFileType
GetVersion
RemoveDirectoryA
GetFileAttributesA
WaitForSingleObject
GetEnvironmentVariableW
GetFileTime
CloseHandle
GetCurrentDirectoryW
DeleteFileW
IsBadReadPtr
SuspendThread
GetCommandLineW
EnterCriticalSection
VirtualAlloc
SetLastError
Sleep
GetModuleHandleA
FindAtomW
SetLastError
ExitProcess
CreateFileA
HeapSize
cryptui
CryptUIWizImport
LocalEnrollNoDS
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIDlgViewContext
CryptUIDlgSelectStoreA
LocalEnroll
DllUnregisterServer
CryptUIWizExport
CryptUIWizDigitalSign
CryptUIDlgFreeCAContext
DllRegisterServer
CryptUIDlgFreeCAContext
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ