Static task
static1
Behavioral task
behavioral1
Sample
ac16a30ae93871c831b89bb2f21034a0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ac16a30ae93871c831b89bb2f21034a0_JaffaCakes118
-
Size
641KB
-
MD5
ac16a30ae93871c831b89bb2f21034a0
-
SHA1
63f70d8e0188f92dbde4c0888692e2d0df3df082
-
SHA256
14942ed906e9dabcc4eed5e0a2a80311b36ce14c1be40f890165c934f80d5f63
-
SHA512
7f026578b67c4053ec8ad8dabfbcf15a39c9a44e3e605de94630055a9e23e00d769b02c7c32fa6a86a9ec0384077a4339f52f7db8e8a5f289a80eb23fd4eedf5
-
SSDEEP
12288:0mMlomE8WCmgtH/Ob5eTOfsSPAUW7KC2tHBcns01beAtpVxag1bvgx6NdC62kV:aPWCmgtH/Ob5IOfnXrH2ndLN1bY02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac16a30ae93871c831b89bb2f21034a0_JaffaCakes118
Files
-
ac16a30ae93871c831b89bb2f21034a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
24b29e428705436e8c8b9fc01073f5b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wvsprintfA
oleaut32
SysReAllocStringLen
advapi32
CredEnumerateA
ole32
CoTaskMemFree
pstorec
PStoreCreateInstance
rasapi32
RasGetEntryDialParamsA
shell32
SHGetSpecialFolderPathA
crypt32
CryptUnprotectData
Sections
CODE Size: - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zz0 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zz1 Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zz2 Size: - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zz3 Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ