Static task
static1
Behavioral task
behavioral1
Sample
f7657db268493cfeec33cc53737a5ace_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7657db268493cfeec33cc53737a5ace_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7657db268493cfeec33cc53737a5ace_JaffaCakes118
-
Size
108KB
-
MD5
f7657db268493cfeec33cc53737a5ace
-
SHA1
77c1ff1c37d2b828e334fdd767ff2f4739e1389d
-
SHA256
cab48cc4dce278f0b48b6ddb1c9ef7c3a81a214661217d9cb5997fe571b469de
-
SHA512
691188cac76ccd98535785a39c01c725e2160039cc4bde21ff019b643de36c13ff136315f79928d0c7d173ea360bd504d7657fa01a6f341c52f5fd15fb70c5ba
-
SSDEEP
1536:au1Om7Y0dmxvdTuRiOKpM0PQEwvjYp37Ncioc4omfvT6jO/nqnDcuW0JCtDm3tnM:jOaY7xdTsiOzhJg376KEigqfjTdN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7657db268493cfeec33cc53737a5ace_JaffaCakes118
Files
-
f7657db268493cfeec33cc53737a5ace_JaffaCakes118.exe windows:5 windows x86 arch:x86
6849a34bacf06d610ccf0e5aecedecc6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CLIPFORMAT_UserFree
CLSIDFromOle1Class
CLIPFORMAT_UserMarshal
PropVariantChangeType
BindMoniker
kernel32
GetTickCount
GetCurrentProcess
GetStartupInfoA
GetCurrentProcessId
GetModuleHandleA
TerminateProcess
GetCurrentThreadId
VirtualAlloc
advapi32
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
wsock32
sethostname
WSARecvEx
GetTypeByNameA
GetAddressByNameA
SetServiceA
GetServiceA
GetNameByTypeA
NPLoadNameSpaces
dn_expand
EnumProtocolsA
TransmitFile
ws2help
WahOpenNotificationHandleHelper
WahCloseNotificationHandleHelper
WahCompleteRequest
WahCreateNotificationHandle
WahCreateHandleContextTable
WahOpenHandleHelper
WahCloseSocketHandle
WahCloseApcHelper
WahCloseThread
WahCloseHandleHelper
WahCreateSocketHandle
Sections
.textbss Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ