Static task
static1
Behavioral task
behavioral1
Sample
241d325ccae088d67a3ffc9e3f95150e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
241d325ccae088d67a3ffc9e3f95150e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
241d325ccae088d67a3ffc9e3f95150e_JaffaCakes118
-
Size
141KB
-
MD5
241d325ccae088d67a3ffc9e3f95150e
-
SHA1
212ab19eb17c65a08333b5a49bbdde24c5b457ad
-
SHA256
be2b5be2a3252447ed3b7a50a9e73557a33f6e417bd195487372d6c9328acbf4
-
SHA512
7f8cdb2a9e917af2ba4951b018a6d644f6900c7ed9d3620209456521ae50d0cb6e86e649367501c137994762a81df81ab6d1a9907db9bdafc2a87d051c1aeca1
-
SSDEEP
3072:X/MQB3CqPErSGuOBicos4vwlGNhB4e3NNKv6M/yB4Q:0Q1Mh61vwIhTWv6WyB4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 241d325ccae088d67a3ffc9e3f95150e_JaffaCakes118
Files
-
241d325ccae088d67a3ffc9e3f95150e_JaffaCakes118.exe windows:5 windows x86 arch:x86
1f9a9ae09be6223087a483b4f1eb79c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AreAllAccessesGranted
RevertToSelf
RegQueryInfoKeyA
RegSetValueW
RegSetKeySecurity
AddAccessDeniedAce
SystemFunction001
kernel32
VirtualAlloc
GetConsoleTitleA
SetConsoleInputExeNameA
GetCalendarInfoA
gdi32
GetObjectType
SetICMProfileW
OffsetWindowOrgEx
Sections
.idata Size: 96KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ