Static task
static1
Behavioral task
behavioral1
Sample
ffed8749b0068fe82e48b34fecc07a4a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ffed8749b0068fe82e48b34fecc07a4a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffed8749b0068fe82e48b34fecc07a4a_JaffaCakes118
-
Size
291KB
-
MD5
ffed8749b0068fe82e48b34fecc07a4a
-
SHA1
b075c8e4d3d9ceb807193a823771b56e0fb2744f
-
SHA256
8f44fb57e53c83b4e96c6ddb2eef32680823f39174786af3a54b72bab5347da0
-
SHA512
c270e4382fd5267739412dbb05adc98aca8e415c5464a2138d319253f5ca0ce608e641c199cb5b49e7dfced0cb7150cc85bac6ac35f451dd25ae17f63f955a44
-
SSDEEP
6144:zTR3oO1yRzXfDIR+EpFa7h895T+Z0i53Vf4pNBwixE3Lb/:zhzCzkRWG85Ffuj/M/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffed8749b0068fe82e48b34fecc07a4a_JaffaCakes118
Files
-
ffed8749b0068fe82e48b34fecc07a4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
58b1bc1d0ede14619c270a2ffd7a56f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetStdHandle
GetProcessHeap
GetPrivateProfileSectionW
WriteConsoleW
GetModuleHandleA
CopyFileA
GetFileAttributesW
VirtualProtect
SetEvent
VirtualQueryEx
WriteConsoleW
lstrlenW
lstrcpyA
CancelIo
GetDriveTypeW
GetStartupInfoA
GetCommandLineA
WriteConsoleW
HeapDestroy
Sleep
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
CryptUIDlgViewContext
CryptUIWizDigitalSign
DllRegisterServer
CryptUIStartCertMgr
DllUnregisterServer
CryptUIWizExport
LocalEnroll
CryptUIWizBuildCTL
CryptUIWizImport
LocalEnrollNoDS
WizardFree
LocalEnroll
WizardFree
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ