Static task
static1
Behavioral task
behavioral1
Sample
4209c9af7a613800bb62d0873a712cdb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4209c9af7a613800bb62d0873a712cdb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4209c9af7a613800bb62d0873a712cdb_JaffaCakes118
-
Size
209KB
-
MD5
4209c9af7a613800bb62d0873a712cdb
-
SHA1
0c151529894ee91456408cbd29a56a34b5019b72
-
SHA256
1ef0ccacaa21ca3e070f93cdcb3830229f9b189a587bff4cda3c4ffead29be4c
-
SHA512
44dabcc4bb9934a2e0f8358405f289bdaf005aabda4ce8044298dc9ea9374b44a7fb5aa4eb8e2fada6897e15292306c8317e0b2bea3faa3c5fbc64677a940ff7
-
SSDEEP
6144:X/fhk1XYOoiAt9L7kt501PjgpGouf1pHYHj4tFA1xXQsi21G:Xhk1drKZ7kt50Jw1Y+j4rAg2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4209c9af7a613800bb62d0873a712cdb_JaffaCakes118
Files
-
4209c9af7a613800bb62d0873a712cdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7e4c9e00fce0bb5ef19783c6ff0bfdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFiberEx
FileTimeToSystemTime
TerminateJobObject
GetTempPathW
EnumResourceNamesW
FlushFileBuffers
SetEvent
LocalAlloc
RaiseException
user32
TranslateMessage
DispatchMessageW
PostThreadMessageW
RealGetWindowClass
MsgWaitForMultipleObjects
PeekMessageW
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
EncryptFileW
DecryptFileW
iphlpapi
NotifyRouteChange
ole32
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
CreateClassMoniker
CoRevokeClassObject
GetRunningObjectTable
CoRegisterMessageFilter
CoUninitialize
CoDisconnectObject
StringFromGUID2
CoInitialize
CoResumeClassObjects
CoReleaseServerProcess
CoAddRefServerProcess
CoTaskMemFree
CoRegisterClassObject
CoTaskMemAlloc
rpcrt4
UuidCreate
shlwapi
wnsprintfW
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ