Static task
static1
Behavioral task
behavioral1
Sample
02e6af8e979625f4dcaf18b16ff57c50_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02e6af8e979625f4dcaf18b16ff57c50_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02e6af8e979625f4dcaf18b16ff57c50_JaffaCakes118
-
Size
296KB
-
MD5
02e6af8e979625f4dcaf18b16ff57c50
-
SHA1
c6ca7fc41fbba2efb512e2681092ad2ddc8fc913
-
SHA256
011f5c889d20f4676fc767b1cfeb6bf46b5a9fb295b029835ad6754c82f68990
-
SHA512
22b490e5dd8dcb5674616292f57c6d479305fc82f75a1cd2a50e62434854455fbf6967ef23c8074d03ddd123cfd0d5646441608ed96d217bb7e41991a5207a20
-
SSDEEP
6144:pi6+sazQXiiegjroFRQfl852k8OcpBwDThyrlt0Sby/lhGfU:piEaIiiegXoFCfeknOc0DNyrlmSbyfGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e6af8e979625f4dcaf18b16ff57c50_JaffaCakes118
Files
-
02e6af8e979625f4dcaf18b16ff57c50_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1e68081915ada5cd799045fe4831d79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
IsBadStringPtrA
IsBadReadPtr
CancelIo
GetDateFormatA
FreeConsole
DeleteCriticalSection
TlsGetValue
GetDiskFreeSpaceExA
CloseHandle
VirtualProtect
ResetEvent
EnumResourceTypesW
LoadLibraryExW
GetModuleHandleA
FindClose
GetDriveTypeW
GetCommandLineA
LocalFree
GetLastError
advapi32
RegCloseKey
IsTokenUntrusted
RegCreateKeyExA
FreeSid
CloseEventLog
RegEnumKeyExA
GetFileSecurityW
LsaFreeMemory
CloseTrace
GetLengthSid
OpenEventLogA
LsaClose
AccessCheck
RegCloseKey
hnetcfg
HNetDeleteRasConnection
HNetFreeSharingServicesPage
DllGetClassObject
HNetGetSharingServicesPage
DllRegisterServer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ