Static task
static1
Behavioral task
behavioral1
Sample
83bf7c2cf7fbca12bd28b6d06114478d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
83bf7c2cf7fbca12bd28b6d06114478d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
83bf7c2cf7fbca12bd28b6d06114478d_JaffaCakes118
-
Size
27KB
-
MD5
83bf7c2cf7fbca12bd28b6d06114478d
-
SHA1
cc321d6d381486769db4b7c232cde01278a2ea0e
-
SHA256
96f4654276e71ff37ae9e17839cd9d5b7c23c6d9f8cc54d040a1ae3afd5627dc
-
SHA512
80ad7605b5b15c46c924f550f582f7941dd14f8b74f566460441890bfdd03ea8e962e29046a3718caa6fe1cde815c4fc6dcd9d13ffc135dfb456b68501eab9c3
-
SSDEEP
768:5LGaIouPXm4lIhuUjK39Z+YILRzhxSxIU7DiTo:xG2u/m4G5jK39ZjCSxIJTo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83bf7c2cf7fbca12bd28b6d06114478d_JaffaCakes118
Files
-
83bf7c2cf7fbca12bd28b6d06114478d_JaffaCakes118.exe windows:5 windows x86 arch:x86
5bfe71cfec1a73eb22463dac66106f0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
msvcp60
??1bad_alloc@std@@UAE@XZ
advapi32
RegCloseKey
ntdll
NtQuerySystemTime
user32
EndDialog
ws2_32
connect
netapi32
DsGetDcNameW
w32time
W32TimeSyncNow
icmp
IcmpSendEcho
ntdsapi
DsBindW
shell32
CommandLineToArgvW
Sections
.MPRESS1 Size: 19KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE