Static task
static1
Behavioral task
behavioral1
Sample
23ce68e4f9aedf09630e7921a7facb73_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23ce68e4f9aedf09630e7921a7facb73_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23ce68e4f9aedf09630e7921a7facb73_JaffaCakes118
-
Size
71KB
-
MD5
23ce68e4f9aedf09630e7921a7facb73
-
SHA1
22c26e591bd5dfbb75e4d10635673ffbb3491f1d
-
SHA256
9e59b9ef0a58351e35a4fc8581f60ba52669bbd0b3031b15e75f136a52e5f106
-
SHA512
caa4e762cdb1f5257c04ecf44730603a1c5c7c6c8b84f5a957c3ec0a5284f4c1825af80a1ae1ae0285dc163ad4a6d26eeb4e6fbb8282b1e372a3dc4cf4da01fa
-
SSDEEP
1536:b8zWDV+Ll1jOXpGGrT5U2qIeS/H84DJnX/R:Iyx+LQYOTqID/HFDVX/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ce68e4f9aedf09630e7921a7facb73_JaffaCakes118
Files
-
23ce68e4f9aedf09630e7921a7facb73_JaffaCakes118.exe windows:5 windows x86 arch:x86
ddf05efddf551cf49684aba8b172e946
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atof
_mbsninc
_mbsicoll
ungetc
fwscanf
_swab
_mbctolower
ldexp
memmove
_mbclen
advapi32
LookupPrivilegeNameW
AddAccessAllowedAce
AccessCheckByTypeResultListAndAuditAlarmByHandleA
GetNumberOfEventLogRecords
CryptSignHashA
CloseEncryptedFileRaw
CryptGetDefaultProviderW
ConvertSecurityDescriptorToAccessA
ConvertSecurityDescriptorToStringSecurityDescriptorW
gdi32
GetEnhMetaFileHeader
GdiConvertMetaFilePict
GetRegionData
GdiGetSpoolFileHandle
EngMarkBandingSurface
kernel32
DefineDosDeviceA
ExpandEnvironmentStringsW
SwitchToFiber
SetConsoleCursorMode
SetTapeParameters
GetModuleHandleA
Process32NextW
GetCommandLineA
PulseEvent
OpenEventA
GetVolumeNameForVolumeMountPointA
GetStartupInfoA
ResumeThread
LoadLibraryA
GetTickCount
SetVolumeLabelA
VirtualProtect
user32
CreateIconFromResource
BeginDeferWindowPos
WINNLSEnableIME
FindWindowW
GetInternalWindowPos
SetSysColors
DestroyCursor
CreateCaret
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ