Static task
static1
Behavioral task
behavioral1
Sample
06303bf89b4d9ea49a12057d71a342e2_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
06303bf89b4d9ea49a12057d71a342e2_JaffaCakes118
-
Size
123KB
-
MD5
06303bf89b4d9ea49a12057d71a342e2
-
SHA1
ef9afa0e93f0c0118c808a2a3b7381bdf0f16ec4
-
SHA256
f57d7aaca89e0a8000e0b284971766b6e8c689830da5377f593fdd7b11769ea5
-
SHA512
1d1878aa364eed07752400c6ac4d63e991ce09c965b6e80eccf7d7a13a8ec436a13ea58452e4902da16a3cf5231f319f5fb4cf808366d6b21a9dc88aab9e36ee
-
SSDEEP
3072:xFDVSCblf9h9CcSm5DxSy7irn79zTT/MHbaFwUfXq:/HsFm5Nvirn79zT5bXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06303bf89b4d9ea49a12057d71a342e2_JaffaCakes118
Files
-
06303bf89b4d9ea49a12057d71a342e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
cacf92084e7702acc2575378b5e79d98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lread
GlobalFree
GetCommandLineA
_lwrite
GlobalHandle
ExitThread
_lclose
GetCurrentDirectoryA
GlobalAlloc
lstrcatA
GlobalUnlock
FreeLibrary
GetWindowsDirectoryA
GetCurrentProcessId
GetVersion
_llseek
FindFirstFileA
GetVolumeInformationA
GlobalLock
DosDateTimeToFileTime
OpenFileMappingW
GetModuleFileNameA
SetConsoleNumberOfCommandsW
_lcreat
GetDriveTypeA
ExitProcess
SetErrorMode
lstrlenA
lstrcpyA
DeviceIoControl
WinExec
GetTimeZoneInformation
LocalFileTimeToFileTime
SetCurrentDirectoryA
SetFileTime
FindClose
GetEnvironmentVariableA
CreateDirectoryA
_lopen
GetModuleHandleA
GetProcAddress
lstrcmpiA
user32
ShowWindow
ChangeDisplaySettingsA
MessageBoxA
GetKeyNameTextA
advapi32
OpenSCManagerA
GetUserNameA
LookupPrivilegeValueA
OpenProcessToken
OpenServiceA
shlwapi
PathGetDriveNumberW
StrTrimA
PathRemoveBlanksA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 44KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE