Static task
static1
Behavioral task
behavioral1
Sample
5284f3f51cce80edac622ac336e32112_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5284f3f51cce80edac622ac336e32112_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5284f3f51cce80edac622ac336e32112_JaffaCakes118
-
Size
768KB
-
MD5
5284f3f51cce80edac622ac336e32112
-
SHA1
f79a32c940e8cc926a858cfe9eee604fdd555514
-
SHA256
b8b548405f2b0577c3869b5e1d1831b803cc669e6d7599f96248733d75814bce
-
SHA512
c63e9651c3fba1e12d76026ef0608a5c28ea3dbff5f78686164c86a57a19e44e66de27eb32a0980fba4bdf087bfe6b7c35c9538281117f04e4706424f3deaf6e
-
SSDEEP
12288:xR9+HD3BxRh+fWEpriJHcV2Jz/zfPf+yxT7DGzSrpvkNzDyXecppOo+xYQdBK4AQ:xOHtxb++grqBJTzfXnFD/rFkQuh6wBKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5284f3f51cce80edac622ac336e32112_JaffaCakes118
Files
-
5284f3f51cce80edac622ac336e32112_JaffaCakes118.exe windows:4 windows x86 arch:x86
53586dfa9040ad9f395eadc8e937e033
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
DeleteFileW
GetPriorityClass
LoadLibraryA
CreateSemaphoreA
OpenSemaphoreA
VirtualProtect
GetLocalTime
CreateMutexW
ReadConsoleA
GetStdHandle
HeapSize
SetLastError
CreateHardLinkA
CreateFileA
GetFileAttributesA
GetProcessHeap
HeapDestroy
GetTickCount
GetStartupInfoA
SetEvent
SetLastError
GetFileSize
CreateDirectoryW
Sleep
dsprop
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
serialui
drvGetDefaultCommConfigA
drvSetDefaultCommConfigW
drvGetDefaultCommConfigW
drvSetDefaultCommConfigA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE