Static task
static1
Behavioral task
behavioral1
Sample
858ca96847d3ca280c5f0c2931918355_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
858ca96847d3ca280c5f0c2931918355_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
858ca96847d3ca280c5f0c2931918355_JaffaCakes118
-
Size
52KB
-
MD5
858ca96847d3ca280c5f0c2931918355
-
SHA1
1aae5cac39e656ec24431369ccdcf6a1c394808b
-
SHA256
e73193bea94d205a2b4b881ff548b941b94b8862ac415ec0798711a24a28d92f
-
SHA512
89b3d63aae01af24cad25ab2ae6549b43c363fb350702cb3fb74c578b3a96a52ba6129b34bf99b9a006849e4a68d51c5293801fbf86cb0cb0a57e76842c42aba
-
SSDEEP
1536:d85HJ5XCLFN6QaPDyt+bn7bfM0cWJWCKE:aHXoTaM6nHfN9KE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 858ca96847d3ca280c5f0c2931918355_JaffaCakes118
Files
-
858ca96847d3ca280c5f0c2931918355_JaffaCakes118.exe windows:4 windows x86 arch:x86
28a22c8454340c221ce38290db1d8a09
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FindFirstFileA
FlushFileBuffers
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetStartupInfoA
GetStdHandle
GetTimeZoneInformation
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
user32
PostMessageA
MsgWaitForMultipleObjects
GetDlgItem
advapi32
PrivilegedServiceAuditAlarmW
LsaNtStatusToWinError
LsaGetQuotasForAccount
LsaEnumeratePrivilegesOfAccount
BuildExplicitAccessWithNameA
olepro32
OleCreatePropertyFrameIndirect
OleCreatePropertyFrame
oleacc
GetStateTextA
GetStateTextW
AccessibleChildren
security
QueryCredentialsAttributesA
ImpersonateSecurityContext
setupapi
SetupGetLineCountW
SetupGetTargetPathA
SetupEnumInfSectionsA
SetupCommitFileQueueA
SetupDiGetClassRegistryPropertyW
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ