Static task
static1
Behavioral task
behavioral1
Sample
c3d04a3a5520a2f58516c2f0acbd4055_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
c3d04a3a5520a2f58516c2f0acbd4055_JaffaCakes118
-
Size
172KB
-
MD5
c3d04a3a5520a2f58516c2f0acbd4055
-
SHA1
f97acd5a5384d81f003d382b5c3a5ac448a9bb62
-
SHA256
d82767751280c173d75b7eac6591bcff4ee4e3e03a683cf6436635a873299daa
-
SHA512
fd5bfb01b5f5c6d857620797ed4add60869ee662dcb5aaf721e3ee1a1fee01fcad08fd4b4b2eaa6dc626d6ac0438033f30d5affde3f12b159fdffe4bca5e41fd
-
SSDEEP
3072:MPeixiCnRhtmmLIIIIII3wfIGcv4IIIyDIIIIIIInoIJaFppgcVWC3hV2bq6hJ40:3ixrvmmLIIIIII3wfIGcv4IIICIIIIIK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3d04a3a5520a2f58516c2f0acbd4055_JaffaCakes118
Files
-
c3d04a3a5520a2f58516c2f0acbd4055_JaffaCakes118.exe windows:6 windows x86 arch:x86
ff16494f85e6da2d1c6ac1a0480e1a89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
shutdown
advapi32
ImpersonateSelf
DeleteService
DeleteAce
CreateWellKnownSid
user32
LogicalToPhysicalPoint
GetMenuDefaultItem
FrameRect
GetLastActivePopup
BroadcastSystemMessageA
GetWindow
kernel32
CreateSemaphoreW
GetTickCount64
GetSystemDefaultUILanguage
GetConsoleWindow
GetTimeZoneInformation
GetCommandLineW
GetThreadPriority
GetFileMUIPath
SetThreadStackGuarantee
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 4KB - Virtual size: 241B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ