Static task
static1
Behavioral task
behavioral1
Sample
07373a7e1aea08790b1f494309ab3623_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07373a7e1aea08790b1f494309ab3623_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
07373a7e1aea08790b1f494309ab3623_JaffaCakes118
-
Size
254KB
-
MD5
07373a7e1aea08790b1f494309ab3623
-
SHA1
8a9b93ee746d962c6f0d95783c39cccef0da99f7
-
SHA256
758da171b1f8359cf5a6136dacbc14f04187476ae82544c80e75fa572eb03137
-
SHA512
76ba7ba02ceea793f9395ddbcffb0346059acaa1a060cf39904cf0de0cb8b90d21fad42c9b522e61c0cca8ce7af50aa7da8df120d339e71f31193e3586c8cb94
-
SSDEEP
6144:wOrPOW0jhUSpgJZrxe3nZNNAPA/jTg2t4Vqaxo:9KWIhX+rxEndt4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07373a7e1aea08790b1f494309ab3623_JaffaCakes118
Files
-
07373a7e1aea08790b1f494309ab3623_JaffaCakes118.exe windows:4 windows x86 arch:x86
371ae8194ad2e56245156a0147916408
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetCurrentThreadId
WaitForSingleObject
lstrcpynA
GetComputerNameA
lstrlenA
GetModuleHandleA
CreateMutexW
OpenMutexW
CreateMutexA
OpenMutexA
OpenEventA
CreateEventA
ExpandEnvironmentStringsW
SetErrorMode
lstrcpyA
GetProcessHeap
lstrcatA
ExpandEnvironmentStringsA
LocalFree
WaitForMultipleObjects
GetFullPathNameA
GetTempFileNameW
CreateDirectoryW
GetTempPathW
lstrlenW
GetLocalTime
CreateSemaphoreA
LocalAlloc
RaiseException
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetProcAddress
samlib
SamOpenAlias
SamCloseHandle
SamiChangePasswordUser
SamSetSecurityObject
SamDeleteAlias
SamRemoveMemberFromAlias
SamDeleteUser
SamAddMemberToAlias
dskquoui
DllGetClassObject
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Ky Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.a Size: 4KB - Virtual size: 822KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jsm Size: 4KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aNY Size: 91KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: 121KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ