Static task
static1
Behavioral task
behavioral1
Sample
60446768c0d560104b7ca1fd5d56cc90_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
60446768c0d560104b7ca1fd5d56cc90_JaffaCakes118
-
Size
243KB
-
MD5
60446768c0d560104b7ca1fd5d56cc90
-
SHA1
6fa1a121bd0fc7436b897dcab53fe95d3681e50d
-
SHA256
538c45a3683ebb388cdf22243eb3f40b90d90dcc764a76d92b1d410821b3859f
-
SHA512
56047d882cb81ed5029d3c9fa5ea4b50207b160f387da6ca58e0811ce7cf0adb2e03a44d8eaea1d7039f85ea5302391fad39c42d839987c5e436814b9d931a2b
-
SSDEEP
6144:AlPjjIUhZ4oYf8sRxg9hXJX60sRXRtKPzVDjNDaRqur6xqhQ:CfIU74omRRxg3XA0MXRtKPzljpoqjchQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 60446768c0d560104b7ca1fd5d56cc90_JaffaCakes118
Files
-
60446768c0d560104b7ca1fd5d56cc90_JaffaCakes118.exe windows:5 windows x86 arch:x86
a703770fb18670753fd772ae0dbe45b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetEnhMetaFileBits
SetColorSpace
GetTextColor
esent
JetInit2
setupapi
SetupDiGetDeviceInstallParamsA
kernel32
SetMailslotInfo
GetFileTime
GetTickCount
GetCurrentProcess
GetProcessTimes
GetVersion
GetLargePageMinimum
SwitchToThread
InterlockedIncrement
SetConsoleCP
GetConsoleSelectionInfo
crypt32
CryptQueryObject
user32
ChangeClipboardChain
GetMenuState
InSendMessage
GetClientRect
IsCharAlphaNumericA
UnhookWindowsHookEx
advapi32
RegOpenCurrentUser
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ