Static task
static1
Behavioral task
behavioral1
Sample
d3f71d01770856aa9d98e40adeccf369_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3f71d01770856aa9d98e40adeccf369_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d3f71d01770856aa9d98e40adeccf369_JaffaCakes118
-
Size
192KB
-
MD5
d3f71d01770856aa9d98e40adeccf369
-
SHA1
52d65bb7d244ef0703465ddc136a08f7f7184e62
-
SHA256
6d9c4925e52c6094ea8bf38294d5a5aa1e5ef95de4a69c549b260264bf16cdea
-
SHA512
774f799015841d4629f0dc0f8f4cbf9492b8d2c99a5ab8c01dd5309bf98534500fa005d6177e93dfc9a0685458a6f5612c68ded45bfdc1ffa7a5634203111775
-
SSDEEP
3072:pAdpzp7TlFjyUcyIyX8KMIqhorFRhZyswX3Koenbw9eeekoigF7UpRhTPjeCF:aV3vjTcdysKshERhFwKoidqowh+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3f71d01770856aa9d98e40adeccf369_JaffaCakes118
Files
-
d3f71d01770856aa9d98e40adeccf369_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1fb41d777d48cdac390fb2b88165bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
iphlpapi
NotifyRouteChange
rpcrt4
UuidCreate
advapi32
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
EncryptFileW
RegCloseKey
RegQueryValueExA
DecryptFileW
kernel32
CreateFiberEx
SetEvent
TerminateJobObject
FileTimeToSystemTime
EnumResourceNamesW
FlushFileBuffers
GetTempPathW
LocalAlloc
RaiseException
user32
PostThreadMessageW
DispatchMessageW
TranslateMessage
RealGetWindowClass
MsgWaitForMultipleObjects
PeekMessageW
ole32
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
CoDisconnectObject
CoAddRefServerProcess
StringFromGUID2
CoRegisterMessageFilter
CoUninitialize
CreateClassMoniker
CoInitialize
GetRunningObjectTable
CoCreateInstance
CoResumeClassObjects
CoReleaseServerProcess
CoTaskMemAlloc
shlwapi
wnsprintfW
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ