Static task
static1
Behavioral task
behavioral1
Sample
8002e12ee374b2cb136757a46116244b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8002e12ee374b2cb136757a46116244b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8002e12ee374b2cb136757a46116244b_JaffaCakes118
-
Size
742KB
-
MD5
8002e12ee374b2cb136757a46116244b
-
SHA1
08afb20b09ebbeb30939389edc7e53b6f4c1fc57
-
SHA256
feb609be0898e8da070811eb70ec98de0d64e9d28d5eebec7e75088c6159218f
-
SHA512
0a58b3deb7dc752c407024c2644d6f237b21d3a9a61317cfc64db69f0371e4d75a4a5527c4146374a006e9792c487ba051018beb76aa5e6e1257d3dc7cb3eab1
-
SSDEEP
12288:494e4oMww1bLO6ejFn8KL8XdChu/FiMZgi7hLEsOYt4ZmwjHCmac95RDOqruN2mE:hes126wFn8KL8tz4MZHVLJtimSimHROY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8002e12ee374b2cb136757a46116244b_JaffaCakes118
Files
-
8002e12ee374b2cb136757a46116244b_JaffaCakes118.exe windows:5 windows x86 arch:x86
fc72956693726a24a7cc33c48816aeb1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CAEnumFirstCA
CACloseCertType
CACloseCA
CADeleteCA
shlwapi
UrlIsOpaqueA
UrlHashA
UrlCompareA
PathCommonPrefixA
PathCombineA
UrlIsNoHistoryW
UrlGetLocationA
UrlGetPartA
UrlCreateFromPathA
UrlCanonicalizeA
UrlUnescapeA
UrlIsA
UrlCombineA
advapi32
RegCreateKeyA
InitializeSid
RegOpenKeyExA
CreateServiceA
RegEnumKeyA
IsValidSid
RegSaveKeyA
ControlService
RegEnumValueA
RegFlushKey
IsValidAcl
RegDeleteValueA
CreateProcessAsUserA
RegCloseKey
OpenServiceA
RegQueryValueA
IsValidSecurityDescriptor
kernel32
GetAtomNameA
CompareStringA
GetProcessId
GetCurrentDirectoryA
GetModuleHandleA
ReadFile
GetEnvironmentVariableA
VirtualAllocEx
GetDateFormatA
FormatMessageA
lstrcpynA
TlsGetValue
GetFullPathNameA
CreateFileA
GetVersionExA
GetPrivateProfileIntA
WriteConsoleA
WaitForSingleObject
nddeapi
NDdeShareAddA
NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA
modemui
drvCommConfigDialogA
drvGetDefaultCommConfigA
CountryRunOnce
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 682KB - Virtual size: 682KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ