Static task
static1
Behavioral task
behavioral1
Sample
aacf4be2961a4e0b6757d734e659691f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
aacf4be2961a4e0b6757d734e659691f_JaffaCakes118
-
Size
477KB
-
MD5
aacf4be2961a4e0b6757d734e659691f
-
SHA1
6b3c9e4b74ada39683012f75f0a660248bc9a8fd
-
SHA256
38d1e86fc05a744816820387aa1b5f5567c983158542419f1ea903e475cda811
-
SHA512
ffa1cf7ad37332b42ed02fe435cebe9162e84997ab3e0fe613cacb91a8fae3f85406bc3c5507c81c4e1c4312d295e676fd3bb7d0e5514c65f34b2b5876253ed9
-
SSDEEP
6144:s+ho5JGmrpQsK3RD2u270jupCJsCxC1mLWcUVZ1U6AHTvsb2fnOqTe19qd1qFS13:TZ2zkPaCxrLCbAobKe10dYFS1sAlH
Malware Config
Signatures
-
Molebox Virtualization software 1 IoCs
Detects file using Molebox Virtualization software.
resource yara_rule sample molebox -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aacf4be2961a4e0b6757d734e659691f_JaffaCakes118
Files
-
aacf4be2961a4e0b6757d734e659691f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f12d5f764808d26c8d193d8198ab377b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueW
RegSetValueA
RegSetValueExW
kernel32
CloseHandle
CreateFileA
CreateFileW
EnterCriticalSection
ExitProcess
InitializeCriticalSection
LeaveCriticalSection
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
clock
free
localtime
malloc
memcpy
mktime
signal
sprintf
sscanf
strcpy
strftime
time
wcscpy
user32
MessageBoxW
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 322KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ