Static task
static1
Behavioral task
behavioral1
Sample
64d07533a7f07ae75e73b7dd99db0b5b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64d07533a7f07ae75e73b7dd99db0b5b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64d07533a7f07ae75e73b7dd99db0b5b_JaffaCakes118
-
Size
88KB
-
MD5
64d07533a7f07ae75e73b7dd99db0b5b
-
SHA1
2871a9ea7f18536777ebb5e1993f066770d28131
-
SHA256
15c7bb4989ecba6feb1ae8fbbac1bae1b7826a2e60999a31b721851e679a7cae
-
SHA512
291532ddcf2b822830f64ba9a7d3bf8bc35fa36cb6ff7d9fc0af06d42a00db90cc3b0ad3846d15e71d501789de43237d3f39c7d24097b2a39f6aad1f38a424b3
-
SSDEEP
1536:WJmwsv/RHI0dc+sUN8ZftsOFCaJdtcINzoWw:W4hhHI0dc+sUOL5XIIeWw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d07533a7f07ae75e73b7dd99db0b5b_JaffaCakes118
Files
-
64d07533a7f07ae75e73b7dd99db0b5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
511f4e420715b5b5263734c2324a0477
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetModuleHandleA
GetLastError
TlsGetValue
GetCommandLineA
CloseHandle
LocalFree
FreeConsole
GetDateFormatA
GetDiskFreeSpaceExA
CancelIo
FindClose
GetDriveTypeW
VirtualProtect
IsBadReadPtr
SetLastError
LoadLibraryExW
IsBadStringPtrA
DeleteCriticalSection
EnumResourceTypesA
advapi32
FreeSid
GetFileSecurityA
AccessCheck
CloseEventLog
LsaClose
IsValidSid
OpenEventLogA
LsaSetSecret
RegCloseKey
RegLoadKeyA
CloseTrace
RegCreateKeyExA
LsaFreeMemory
RegCloseKey
osuninst
RemoveUninstallImage
ExecuteUninstall
IsUninstallImageValid
GetUninstallImageSize
ProvideUiAlerts
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE