Static task
static1
Behavioral task
behavioral1
Sample
47578d9eaf2049ad9e7cbd7c888f7a3d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
47578d9eaf2049ad9e7cbd7c888f7a3d_JaffaCakes118
-
Size
30KB
-
MD5
47578d9eaf2049ad9e7cbd7c888f7a3d
-
SHA1
f0f9a19eb900d0a14ec7bf6a26916ec2990633a8
-
SHA256
454cfc01b3d3b0e9a21857147aed664dcb45e1c2ca71ccc63bf0760f91b967fc
-
SHA512
868004f385c64ec0ffe31afdaf16050050b5148772c730129802f37bb13ef62108c1785240a5804e3bad24b9c87a66b69fe92600150dde912063685f32b60d98
-
SSDEEP
768:fmH5Yx/ctLt9tupBcEE8CF+pwW9wdhhhcn:OZ2CXgpBcTjgw4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47578d9eaf2049ad9e7cbd7c888f7a3d_JaffaCakes118
Files
-
47578d9eaf2049ad9e7cbd7c888f7a3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
486a9098df8ab23694d3a06408d73f0f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteProcessMemory
ReadFile
GetStartupInfoW
LoadLibraryExA
CreateProcessA
VirtualProtect
ReleaseMutex
LoadLibraryExW
LoadLibraryA
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
SetThreadPriority
WriteProcessMemory
ReadProcessMemory
LoadLibraryExW
GetSystemTime
CreateFileA
GetStartupInfoA
GetStartupInfoA
CreateProcessW
VirtualProtect
VirtualProtectEx
credui
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIReadSSOCredA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
Sections
.text Size: 21KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ