Static task
static1
Behavioral task
behavioral1
Sample
12c7fc07432a70c0ca959cef7317b5bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12c7fc07432a70c0ca959cef7317b5bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12c7fc07432a70c0ca959cef7317b5bb_JaffaCakes118
-
Size
820KB
-
MD5
12c7fc07432a70c0ca959cef7317b5bb
-
SHA1
64ad874774ae4ce0f34c5dbd76ed8b8713c3a601
-
SHA256
ca03292fbd43b6fc8c506e89418a1ea2d4a3b96275410e88af67548330ba70b2
-
SHA512
f3a493337cd5851085d433d4e37d53517e62345856d89a07ebed051b36b5961c348bacc08cb82433982aefd7c662fdbbe1ffa2703f3e8157b4c90bbe6d0a9d41
-
SSDEEP
24576:2ubdQK+AkqILgMlFqT/Nk9zcNAxgCn+TzonsyzNs:2uBfcFFqTUcixATUFzNs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12c7fc07432a70c0ca959cef7317b5bb_JaffaCakes118
Files
-
12c7fc07432a70c0ca959cef7317b5bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
395344ea039aec536a44adfbe42cede5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetEnvironmentVariableW
GlobalSize
lstrlenA
GetExitCodeProcess
CreateEventA
WriteFile
VirtualAlloc
ResumeThread
GlobalFree
InterlockedExchange
CreateMutexA
GetModuleHandleW
ResetEvent
CloseHandle
GetStdHandle
GetACP
LocalFree
GetPrivateProfileIntW
FindVolumeClose
advapi32
RegDeleteValueA
CloseEventLog
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyW
ControlService
RegQueryValueW
CreateServiceA
IsValidAcl
ClearEventLogA
IsTextUnicode
IsValidSid
RegCloseKey
admparse
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
ResetAdmDirtyFlag
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 811KB - Virtual size: 810KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ