Static task
static1
Behavioral task
behavioral1
Sample
230606dd8b0d62e2a8a04ef61b2d8707_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
230606dd8b0d62e2a8a04ef61b2d8707_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
230606dd8b0d62e2a8a04ef61b2d8707_JaffaCakes118
-
Size
660KB
-
MD5
230606dd8b0d62e2a8a04ef61b2d8707
-
SHA1
5c50cdad090de913d0c87edeb392c8df1af9f5c3
-
SHA256
5bf84469051c85bd684e03eb46f774cb1e913884c95acf7b210a8a4469da8d9f
-
SHA512
188e08205a38730057c63753451784a499657380cb0384e7d7f9ed9b5c3d60aad8daeae47e125ab22fd23357920bfd79a69423c5f9d733269160a2a7331df77d
-
SSDEEP
12288:lMtWh23Ks1mQnWattmsbMVSH05SxQiEQ9jmE56:lMtP3p0RzYa+E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230606dd8b0d62e2a8a04ef61b2d8707_JaffaCakes118
Files
-
230606dd8b0d62e2a8a04ef61b2d8707_JaffaCakes118.exe windows:5 windows x86 arch:x86
e4319b81fbef6bafcfa26e0e6cc0de2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyW
OpenEventLogW
ClearEventLogA
LogonUserW
InitializeAcl
CryptSignHashW
RegOpenKeyA
ControlService
RegReplaceKeyA
RegSaveKeyA
RegCreateKeyExA
RegUnLoadKeyA
authz
AuthzAddSidsToContext
AuthzInitializeContextFromSid
uxtheme
GetWindowTheme
GetThemeAppProperties
DrawThemeText
GetThemeBackgroundExtent
GetThemeSysFont
GetThemeSysInt
GetThemePosition
IsThemeActive
GetCurrentThemeName
GetThemeFilename
GetThemeEnumValue
CloseThemeData
GetThemeSysBool
GetThemeBackgroundRegion
wtsapi32
WTSFreeMemory
WTSSetSessionInformationW
WTSVirtualChannelRead
WTSWaitSystemEvent
WTSRegisterSessionNotification
WTSQueryUserToken
WTSVirtualChannelPurgeInput
WTSQuerySessionInformationA
WTSSetUserConfigW
WTSEnumerateSessionsW
WTSEnumerateServersA
kernel32
WaitForSingleObject
CreateJobObjectW
GetProcAddress
GetStringTypeW
OpenJobObjectA
InitializeCriticalSection
GetCommandLineW
MoveFileA
GetModuleHandleA
GetTempPathA
ReadConsoleA
GetProfileSectionA
GetSystemDirectoryA
CreateMailslotA
CreateFileW
GetLogicalDriveStringsA
GetModuleFileNameW
UnmapViewOfFile
GetDateFormatA
GetVersion
LoadLibraryExA
GetExpandedNameA
lstrcmpiA
DeleteFileW
SearchPathW
GetTickCount
GetFileAttributesW
MoveFileExA
GetConsoleAliasA
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 566KB - Virtual size: 566KB
IMAGE_SCN_MEM_READ