Static task
static1
Behavioral task
behavioral1
Sample
1283d4d3bf8f326f12d7be063df998c9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1283d4d3bf8f326f12d7be063df998c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1283d4d3bf8f326f12d7be063df998c9_JaffaCakes118
-
Size
302KB
-
MD5
1283d4d3bf8f326f12d7be063df998c9
-
SHA1
05f715c127b938ba60a5fd0bafc8a17851450f15
-
SHA256
b0a6372ec1f02c661042b3bce29f9fcc75005008dd90baaacdfe0be742966cd2
-
SHA512
3f41454fab40fc45a2319d047df12161fc69dc3cca7647839058b97b81df73d519186361948cc6fb328ccc614bca2c8b1c92cf704db23f699b415e4cf7a6afbd
-
SSDEEP
6144:2Y/yzKQsAmPBEGveeUy8gBndbQ2tcsrZJ+jVT5ebfw74QUf:QzK1nWBeb/dO2KiJKKfzQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1283d4d3bf8f326f12d7be063df998c9_JaffaCakes118
Files
-
1283d4d3bf8f326f12d7be063df998c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
82e08f55d969c95bf89b6510d2c57279
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetFileTime
IsBadReadPtr
EnterCriticalSection
GetModuleHandleA
SetFileAttributesW
Sleep
DeleteFileW
GetCommandLineW
GetFileType
SuspendThread
GetEnvironmentVariableW
SetLastError
HeapSize
FindAtomW
GetFileAttributesA
SetLastError
ExitProcess
WaitForSingleObject
RemoveDirectoryA
CloseHandle
GetCurrentDirectoryW
GetVersion
CreateFileA
ReadFile
cryptui
CryptUIDlgFreeCAContext
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIDlgViewContext
LocalEnroll
LocalEnrollNoDS
DllUnregisterServer
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizImport
CryptUIDlgSelectStoreA
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ