Static task
static1
Behavioral task
behavioral1
Sample
378c7ef7a8295f20d960b2817b65f8f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
378c7ef7a8295f20d960b2817b65f8f0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
378c7ef7a8295f20d960b2817b65f8f0_JaffaCakes118
-
Size
807KB
-
MD5
378c7ef7a8295f20d960b2817b65f8f0
-
SHA1
b2616793a877755a432ec94c8ff29fca94b5f16f
-
SHA256
4b7f2284425b10e57194b899d67c32a387a3d3476c222bf4b8552db1b4f33e52
-
SHA512
3a4b294b3e3009aa09f998b365687b877ee767ef3b109d7e66cff28b3c2e5459e93de5adddcca51b5009216fe3940ffeeb96f7e8c33be016aaa87239a557c2fc
-
SSDEEP
12288:35g44HH0xBWBrNrMaJwEUxC/7aNuxpPGAAoi5sWIznOw:35gTHHoWpJwi/+mjO+Ow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 378c7ef7a8295f20d960b2817b65f8f0_JaffaCakes118
Files
-
378c7ef7a8295f20d960b2817b65f8f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
171a31ba05345078ef101a808b269841
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
powrprof
ReadPwrScheme
pdh
PdhAddCounterA
psapi
EnumProcessModules
version
GetFileVersionInfoSizeA
shfolder
SHGetFolderPathA
user32
UnpackDDElParam
gdi32
CombineRgn
comdlg32
ChooseColorA
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
DragQueryFileA
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
SysFreeString
Sections
.MYCRACK Size: 283KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MYCRACK Size: 432KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�r� Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE