Static task
static1
Behavioral task
behavioral1
Sample
5677fc337321e9332dcdd1418580a360_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5677fc337321e9332dcdd1418580a360_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5677fc337321e9332dcdd1418580a360_JaffaCakes118
-
Size
212KB
-
MD5
5677fc337321e9332dcdd1418580a360
-
SHA1
98676eb808e3df7dad2106f78f376aa9cded9d7c
-
SHA256
4bbe71c625688ce3420322619e58632cf18390b6b9b0d664160ad21f71901a82
-
SHA512
97551b1ebc73dd9deb792d0534af0121c3811dee23ffcdea04ac0034453ba8862ffcdc1b9f56db4ba41d955a613d811b98c26595b04dd441e9807b52611c903a
-
SSDEEP
3072:aaM74bUOTAjzX7UzYJeGqQeYCn2xwD8q1JFFGAXfUCXHSRc+sfql:T44b7czU4eyed208qvFsRc+Zl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5677fc337321e9332dcdd1418580a360_JaffaCakes118
Files
-
5677fc337321e9332dcdd1418580a360_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c4846fa03a28c7bdcadc9a6c0ae1f66
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetWriteWatch
SetComputerNameW
GetVolumeNameForVolumeMountPointW
SetNamedPipeHandleState
OpenThread
CallNamedPipeW
WriteFile
GlobalHandle
InitAtomTable
InitializeCriticalSectionAndSpinCount
CommConfigDialogA
SetFileApisToOEM
Process32Next
CompareStringA
VerifyVersionInfoW
lstrcmp
Sleep
FindCloseChangeNotification
SetThreadContext
OpenWaitableTimerW
GetConsoleAliasExesA
GlobalUnfix
GetVolumeInformationW
SetMailslotInfo
SetConsoleCursor
GetComputerNameA
AddAtomA
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetACP
CreateFileA
VirtualAlloc
GetCurrentThread
LoadLibraryA
GetProcAddress
GetOEMCP
user32
PostQuitMessage
DefWindowProcA
LoadCursorA
gdi32
DeleteEnhMetaFile
advapi32
RegOpenKeyW
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ