Static task
static1
Behavioral task
behavioral1
Sample
70c0abd9a17a0e85563dd9a26f01779e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70c0abd9a17a0e85563dd9a26f01779e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70c0abd9a17a0e85563dd9a26f01779e_JaffaCakes118
-
Size
218KB
-
MD5
70c0abd9a17a0e85563dd9a26f01779e
-
SHA1
c084c1a3a082673edf3002cf5fbf617f979423a2
-
SHA256
39645fc1eb91480f7257be7c72362ba2b271233abfc1fae73ebfaef68e697a52
-
SHA512
132e16459cbe7fe79be1064779bb6cbd1c6ba28d57fe765dcba4a57766ee411adc98eb988937b9e1cbe158a2f4aa39374c78f92073fb5165f04396c1f4bc5ed2
-
SSDEEP
3072:1cjraJf5uZJcqW0TJeWeg0w/bz8Y3GWBSwLvqIdyYowWiOtH4TUE8+dFSAaHwr0F:KjQRaOqW0TSstWiSwRMZdwcHwr06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70c0abd9a17a0e85563dd9a26f01779e_JaffaCakes118
Files
-
70c0abd9a17a0e85563dd9a26f01779e_JaffaCakes118.exe windows:5 windows x86 arch:x86
be0a206d621e91e839f2361050deea99
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
CreateMutexA
CompareFileTime
GetCurrentProcess
GetVersionExA
GetStartupInfoA
GetTickCount
GetModuleFileNameW
GetCommandLineA
InterlockedIncrement
GetModuleHandleA
GetCurrentThreadId
TlsAlloc
GetCurrentProcessId
GetProcAddress
GetStartupInfoW
GetModuleHandleW
InterlockedDecrement
GetCurrentThread
GetModuleFileNameA
GetLocalTime
QueryPerformanceCounter
GetStdHandle
shlwapi
PathCommonPrefixW
ole32
OleInitialize
scarddlg
ord2
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
memcpy
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ