Static task
static1
Behavioral task
behavioral1
Sample
bf555fc41ce5d6f4547e1911901375ea_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf555fc41ce5d6f4547e1911901375ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf555fc41ce5d6f4547e1911901375ea_JaffaCakes118
-
Size
65KB
-
MD5
bf555fc41ce5d6f4547e1911901375ea
-
SHA1
cc08c4aff06e5e11f63f5cca77b0dfbd73d740b7
-
SHA256
87fd85fc898dd7eb323162ebb58097edc7e7bc7cc00dce6342812603b4f3b07e
-
SHA512
108d7e1c4e9ab579ae1570579a066fd122b429b8b7df5ef4c0cb5d5d65e67cdf5eb5728a7e26bb8fdb97930c5573c5c9ee13187cef59de3c02454e2f8f277e1f
-
SSDEEP
768:33UH19MiWINVyTzE1uQjA5gHS2GNtRX3DugxYX6HRqscTfwn0:33819MiWc9jQgHS2GNjDuJecbwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf555fc41ce5d6f4547e1911901375ea_JaffaCakes118
Files
-
bf555fc41ce5d6f4547e1911901375ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
493fadfe59ec1ccb667d3415d5357692
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SCRYPT Size: 75B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SCRYPT Size: 93B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pvksejex Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0eek340o Size: 32KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE