Static task
static1
Behavioral task
behavioral1
Sample
M.221037-220782900.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
M.221037-220782900.exe
Resource
win10v2004-20240426-en
General
-
Target
71b2b62a3ba5c0862011eba012ceeff9_JaffaCakes118
-
Size
629KB
-
MD5
71b2b62a3ba5c0862011eba012ceeff9
-
SHA1
7ed98f46d86f400818086bd5c1e1af42209e81ed
-
SHA256
413338fadc5d840f46a3b771247eb7e9b9b3332c411cd5b3780dea4e1c35ae9a
-
SHA512
cf18b7573426d9e6e8eb4a9dbd1d22e14f207180b3cf03b73361ad3c246a04eac28823b94d9375ae18abab30b3be95e09b8778339fc68237a16ade45d4700be6
-
SSDEEP
12288:bs4HF0WaNmUnhNPJSv8ZoE0H7kjwgJ4/PpBHH9XTKnN+6SF0o3KfqmRY:bs4p4PJSUkIjwK43DdXen86S1aze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/M.221037-220782900.com
Files
-
71b2b62a3ba5c0862011eba012ceeff9_JaffaCakes118.zip
-
M.221037-220782900.com.exe windows:5 windows x86 arch:x86
3f612a85b383fc846fb2c4f939b907f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rsaenh
CPDecrypt
CPEncrypt
CPCreateHash
CPDeriveKey
kernel32
GetCurrentThreadId
LoadLibraryExW
WriteConsoleW
GetShortPathNameW
CloseHandle
HeapReAlloc
VirtualAlloc
OpenFileMappingW
CreateSemaphoreA
LoadLibraryA
CreateThread
OpenMutexW
lstrcmpi
FindClose
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.data Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ