Static task
static1
Behavioral task
behavioral1
Sample
715d071a8f0a8552a002d6347a52e13a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
715d071a8f0a8552a002d6347a52e13a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
715d071a8f0a8552a002d6347a52e13a_JaffaCakes118
-
Size
268KB
-
MD5
715d071a8f0a8552a002d6347a52e13a
-
SHA1
b093a35a0b2faff292e497b6f4b0b4ef45d3376f
-
SHA256
f7d8c91adc09d8fee7aef8ab5e0f5a0f0006e77da858317913196983376ab448
-
SHA512
729666be58aa195c28d89e11e28f6c7c514324a496f4726e593efad51b46c6d5116890afeb2b0e127cf1cdcbbac0f16ed1a1f972365e6dcf4fdfd8e595556495
-
SSDEEP
6144:KxxVTj+/q0bykF+hS/e2bm3y+7C30/VFB7koPM4GMMhhGtED0:AeiWykF+PlyVsXDUD0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 715d071a8f0a8552a002d6347a52e13a_JaffaCakes118
Files
-
715d071a8f0a8552a002d6347a52e13a_JaffaCakes118.exe windows:5 windows x86 arch:x86
199b7e92fdebd65631f97f47bf8f9af3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
clusapi
ClusterEnum
CloseCluster
CloseClusterNode
CloseClusterGroup
crypt32
CertOpenSystemStoreA
CryptHashMessage
CryptDecodeMessage
CryptFindOIDInfo
CryptDecryptMessage
CryptEnumOIDInfo
CryptMemRealloc
CertDeleteCTLFromStore
CryptUnprotectData
CryptProtectData
advapi32
OpenEventLogW
CryptSignHashA
RegCreateKeyExA
ClearEventLogW
RegLoadKeyW
RegRestoreKeyA
ReadEventLogA
RegUnLoadKeyA
RegOpenKeyW
RegReplaceKeyW
RegEnumKeyA
RegSaveKeyA
RegDeleteValueA
IsTextUnicode
modemui
CountryRunOnce
drvGetDefaultCommConfigA
kernel32
RemoveDirectoryA
AddAtomW
GetProcAddress
LoadLibraryExA
OpenMutexA
FindFirstFileA
CreateMutexA
GetBinaryTypeW
GetVersionExA
GetCurrentDirectoryA
GetTempFileNameA
FindClose
FormatMessageW
lstrcatW
CreateSemaphoreA
IsBadReadPtr
LoadLibraryA
ResetEvent
HeapReAlloc
GetConsoleAliasW
WaitForSingleObjectEx
Sections
.text Size: 254KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data1 Size: - Virtual size: 256B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ