Static task
static1
Behavioral task
behavioral1
Sample
65d7413d90592d8c0ef9cab3f8b90399_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
65d7413d90592d8c0ef9cab3f8b90399_JaffaCakes118
-
Size
3.5MB
-
MD5
65d7413d90592d8c0ef9cab3f8b90399
-
SHA1
078d9b12e488fbad0fe69ec35920ad233759e4e8
-
SHA256
16ca89afa6d3e34dae65173e8a13a33017e02b87b5ce685cf366154bb4962570
-
SHA512
41f296bf3394cba872608d00270bb7caea31e3daf26f04cfd5395f2e0cf4b95eebc05683dec74c60c4c5a0f75b0f62eaabc4d55fed2b5b0719d9f0ded8007486
-
SSDEEP
98304:AefQ2pI93E8FgJzh395lVdt45iDwlqJDHkO:AeIGIBm19vV3D9JwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 65d7413d90592d8c0ef9cab3f8b90399_JaffaCakes118
Files
-
65d7413d90592d8c0ef9cab3f8b90399_JaffaCakes118.exe windows:5 windows x86 arch:x86
908c4a7972f6b3def89f1e076bde9904
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidToStringW
imagehlp
ImageEnumerateCertificates
shlwapi
PathFindFileNameW
kernel32
GetTimeZoneInformation
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetTimer
gdi32
GetStockObject
advapi32
CryptDestroyHash
shell32
SHGetSpecialFolderPathW
ole32
CoCreateGuid
oleaut32
SysFreeString
ws2_32
connect
wldap32
ord22
mswsock
GetAcceptExSockaddrs
Sections
.text Size: - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ