Static task
static1
Behavioral task
behavioral1
Sample
768d2bef26975c7c15767944a71259d4_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
768d2bef26975c7c15767944a71259d4_JaffaCakes118
-
Size
188KB
-
MD5
768d2bef26975c7c15767944a71259d4
-
SHA1
38d4f37014982484377ae2cea3e0bddf0a770667
-
SHA256
b03c0d9a936644e05ec1abb6463bca88cf6300d31c60138037bd951af676db6d
-
SHA512
976a8d0495ed74ed1417fa2af3201455fd3912bd76dd3c5ec41a5fe680428ee20abab174bb6ddfe075593a9798fd2fe4754a8c0e26739284388a3fd65f31dcf0
-
SSDEEP
3072:Wjyvr5Ps+g8SYkQy6aOEV2/uxq1WolGLmt01hji3mF7zS1rCkFSXQVDLU6:OyvrJbtEVm4qvlPgAmFnEFyQVDw6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 768d2bef26975c7c15767944a71259d4_JaffaCakes118
Files
-
768d2bef26975c7c15767944a71259d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
0c7bf420d808bf2b04ee9624e9347337
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
TlsGetValue
SetCurrentDirectoryA
GetACP
InterlockedDecrement
VirtualAllocEx
LoadLibraryExW
CreateJobObjectA
CreateFileW
GetCurrentDirectoryW
ReadConsoleA
GetLongPathNameA
MoveFileA
GetModuleHandleA
FreeConsole
LoadLibraryW
CreateMutexA
GetProcessHeap
OpenMutexA
Sleep
GetCurrentThreadId
RemoveDirectoryA
cmpbk32
PhoneBookEnumNumbers
PhoneBookFreeFilter
PhoneBookLoad
PhoneBookEnumCountries
user32
GetClassLongA
GetPropW
IsDialogMessageA
CreateDesktopW
PeekMessageA
LoadCursorW
InsertMenuW
IsCharLowerA
PostMessageA
DrawStateW
CreateWindowExA
DispatchMessageA
FindWindowA
LoadMenuW
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.kdata Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloh Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE