Static task
static1
Behavioral task
behavioral1
Sample
7d12c5cb1c8797b60e6f2f2be54c6f1b_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
7d12c5cb1c8797b60e6f2f2be54c6f1b_JaffaCakes118
-
Size
148KB
-
MD5
7d12c5cb1c8797b60e6f2f2be54c6f1b
-
SHA1
f49bf12d3b0727d969855e7bda1f1e93ad90faf9
-
SHA256
97ce9c73905f62aee8140cc2f3a4806b74d867a226b9efcef4bffbb95512dd0b
-
SHA512
f5c1974ba072cb6054873c73ad3420baae48c4e80e2cdd21f6223e6ac14d2909eb2c85b0922ca05907be8cf5ed46b5cb12a026c99f9e8a198f1aeec2feb06cb3
-
SSDEEP
3072:NpPlJKa1dQPaZugu0/mz3HC+i50x8eAidDUKSH:NpPBdQyPuBz3iZa8e/OK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d12c5cb1c8797b60e6f2f2be54c6f1b_JaffaCakes118
Files
-
7d12c5cb1c8797b60e6f2f2be54c6f1b_JaffaCakes118.exe windows:6 windows x86 arch:x86
2bc60a0652e01ff46b03f65ff10ddd4f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
secur32
GetUserNameExW
advapi32
IsTokenRestricted
GetSecurityDescriptorGroup
user32
GetMenuState
GetForegroundWindow
GetMenuInfo
IsZoomed
VkKeyScanA
GetClientRect
InsertMenuItemW
LoadMenuIndirectA
GetTitleBarInfo
kernel32
GetCommConfig
GetUserGeoID
SetCurrentConsoleFontEx
CloseHandle
GetThreadLocale
GetCurrentThreadId
GetCommandLineW
MultiByteToWideChar
HeapCompact
GetProcessShutdownParameters
WaitForSingleObject
IsDebuggerPresent
GetTimeFormatW
SetConsoleScreenBufferInfoEx
GetLastError
GetExitCodeThread
GetSystemDirectoryA
UnhandledExceptionFilter
urlmon
MkParseDisplayNameEx
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ