Static task
static1
Behavioral task
behavioral1
Sample
179de2b64de0b4cb48fdee87613eedbf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
179de2b64de0b4cb48fdee87613eedbf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
179de2b64de0b4cb48fdee87613eedbf_JaffaCakes118
-
Size
52KB
-
MD5
179de2b64de0b4cb48fdee87613eedbf
-
SHA1
efa214ad40567d11fd39ff71180913b6efc6155a
-
SHA256
da3b0dd922609adec6b9c897c8f26450833f1445b63b1e791d08db621a780ccd
-
SHA512
3c8d2397d18d1a7f8f7ff71741c062ebaeac255433bb275855e16d09755ca2f3b56910b8d6eff43dc279de363e74f1318d56cf94c47ab22c94af4f15e34be879
-
SSDEEP
384:yrCZPVZzYBcNeLNek+vDdngH0gKH9p7DZ3TDRxVx16U4gU9qqejMnnisp6/:yINZ3nylI/DZ3BX3jU9jUsnI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179de2b64de0b4cb48fdee87613eedbf_JaffaCakes118
Files
-
179de2b64de0b4cb48fdee87613eedbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
fad0febbe7f623ea70d7f8f3fdd8c0ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
ResetEvent
GetDateFormatA
GetCommandLineA
SetLastError
GetLastError
VirtualProtect
IsBadReadPtr
IsBadStringPtrA
GetDriveTypeW
LocalFree
GetModuleHandleA
FreeConsole
CancelIo
SetLocalTime
CloseHandle
EnumResourceTypesW
FindClose
LoadLibraryExW
GetDiskFreeSpaceExA
advapi32
RegCloseKey
FreeSid
AccessCheck
OpenEventLogA
RegCreateKeyExA
GetLengthSid
RegEnumKeyExA
CloseTrace
LsaFreeMemory
LsaClose
CloseEventLog
GetFileSecurityW
IsTokenUntrusted
RegCloseKey
hnetcfg
HNetDeleteRasConnection
DllGetClassObject
HNetFreeSharingServicesPage
DllRegisterServer
HNetGetSharingServicesPage
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE