Static task
static1
Behavioral task
behavioral1
Sample
259f48f0ea37740b41bff840261766b7_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
259f48f0ea37740b41bff840261766b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
259f48f0ea37740b41bff840261766b7_JaffaCakes118
-
Size
254KB
-
MD5
259f48f0ea37740b41bff840261766b7
-
SHA1
853b7d032a96aa072e914f22630e6e7ff26b9b10
-
SHA256
adc1de34a93c9ac5115e26a64a29ae3a5e4b551a3ba3c90fb5306def794d07c1
-
SHA512
7e53bce94f79e4746140d35b18f623e1a62f7095045cae95198c7ddcc3d54f422b1a959af2c0a672b07fb903f3549ba669c72882d2ab9eba3ae6bded81a62fab
-
SSDEEP
6144:SOrPOW0jhUSpgJZrxe3nZNNAPA/jTg2t4Vqaxo:bKWIhX+rxEndt4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259f48f0ea37740b41bff840261766b7_JaffaCakes118
Files
-
259f48f0ea37740b41bff840261766b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
371ae8194ad2e56245156a0147916408
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetCurrentThreadId
WaitForSingleObject
lstrcpynA
GetComputerNameA
lstrlenA
GetModuleHandleA
CreateMutexW
OpenMutexW
CreateMutexA
OpenMutexA
OpenEventA
CreateEventA
ExpandEnvironmentStringsW
SetErrorMode
lstrcpyA
GetProcessHeap
lstrcatA
ExpandEnvironmentStringsA
LocalFree
WaitForMultipleObjects
GetFullPathNameA
GetTempFileNameW
CreateDirectoryW
GetTempPathW
lstrlenW
GetLocalTime
CreateSemaphoreA
LocalAlloc
RaiseException
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetProcAddress
samlib
SamOpenAlias
SamCloseHandle
SamiChangePasswordUser
SamSetSecurityObject
SamDeleteAlias
SamRemoveMemberFromAlias
SamDeleteUser
SamAddMemberToAlias
dskquoui
DllGetClassObject
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Ky Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.a Size: 4KB - Virtual size: 822KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jsm Size: 4KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aNY Size: 91KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: 121KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ