Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6d1a06b170feabc7f46233cea15b93ea.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6d1a06b170feabc7f46233cea15b93ea.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6d1a06b170feabc7f46233cea15b93ea
-
Size
224KB
-
MD5
6d1a06b170feabc7f46233cea15b93ea
-
SHA1
7e704cca0d9178882782222b49d5e817afc68d7b
-
SHA256
716bec616a5efad93415d8819dec84a2c9734c04202ceb56eb205bf1bb020b3b
-
SHA512
494c02f25df3b0bfdf060d993ea910651cfa353868e9df1bac2bc4073152589efb50d9b9f793272633bdf6fd635442b703dbc300c03197e3f2af3938b2a8fcf2
-
SSDEEP
3072:7edmHPSw/8yZfTBj95zHg0CMbpC8Ek0EvX4kdf8vEKVHq5Nq9obG1VsHutLPfbcR:CwSwrH/zHgos8EymK5NYkuBP2VmSH2X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6d1a06b170feabc7f46233cea15b93ea
Files
-
JaffaCakes118_6d1a06b170feabc7f46233cea15b93ea.exe windows:4 windows x86 arch:x86
8dd5c3a4301be26483a26dac9a7027c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFiberEx
WaitForMultipleObjects
GetTickCount
CancelIo
GetSystemTime
VirtualFree
GetCurrentThread
EnumResourceNamesW
SetThreadPriority
IsBadReadPtr
GetThreadPriority
FlushFileBuffers
GetACP
GetCurrentThreadId
GetLastError
CreateSemaphoreA
user32
PostThreadMessageA
GetDesktopWindow
ReleaseDC
PeekMessageA
DestroyWindow
GetQueueStatus
DispatchMessageA
MsgWaitForMultipleObjects
CreateDialogParamA
RealGetWindowClassA
GetDC
RegisterWindowMessageA
ShowWindow
wsprintfA
wvsprintfA
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
winmm
timeGetTime
timeSetEvent
advapi32
RegEnumKeyExA
RegEnumValueA
CryptReleaseContext
CryptHashData
RegCreateKeyExA
CryptEncrypt
CryptDestroyHash
CryptGetHashParam
RegQueryValueExA
CryptDestroyKey
CryptCreateHash
GetUserNameA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
CryptImportKey
RegCloseKey
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ