Static task
static1
Behavioral task
behavioral1
Sample
5382626b98ea4fcaccf872cf3c8dc4f1_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5382626b98ea4fcaccf872cf3c8dc4f1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5382626b98ea4fcaccf872cf3c8dc4f1_JaffaCakes118
-
Size
302KB
-
MD5
5382626b98ea4fcaccf872cf3c8dc4f1
-
SHA1
19ef25e192adb12e8cb68d198412198db47a096c
-
SHA256
df9be23201d72af511d2f081e832fbf51c9b32c0078dc5a95c007029182a62d4
-
SHA512
b82ddeadc6abb291761426c76309bb529dbe241f50999eaa65596678481b22bcf618366b4bfd627dd9dc8721179b237a2d2dbbee668c4c045079e8cd4f7d7653
-
SSDEEP
6144:Sr/WSVrZ6qv6zjd65EjgQ8GmIcMOCP14zjc8QtTWmvLqoj4UK:lHd6+q5iX07QtTWmvjjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5382626b98ea4fcaccf872cf3c8dc4f1_JaffaCakes118
Files
-
5382626b98ea4fcaccf872cf3c8dc4f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
89546cde75885a993dc5400bb29e5d0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileW
GetVersion
ReadFile
VirtualAlloc
CloseHandle
GetFileTime
GetModuleHandleA
IsBadReadPtr
CreateFileA
FindAtomW
GetEnvironmentVariableW
GetCommandLineW
GetCurrentDirectoryW
SetFileAttributesW
WaitForSingleObject
GetFileAttributesA
RemoveDirectoryA
HeapSize
SetLastError
SetLastError
EnterCriticalSection
ExitProcess
GetFileType
SuspendThread
cryptui
CryptUIDlgFreeCAContext
LocalEnroll
LocalEnrollNoDS
CryptUIWizDigitalSign
CryptUIDlgSelectStoreA
DllRegisterServer
CryptUIWizImport
CryptUIWizExport
CryptUIDlgViewContext
DllUnregisterServer
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIDlgFreeCAContext
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ