Static task
static1
Behavioral task
behavioral1
Sample
c906c1445a13823aa84cc88e2a755c09_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c906c1445a13823aa84cc88e2a755c09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c906c1445a13823aa84cc88e2a755c09_JaffaCakes118
-
Size
271KB
-
MD5
c906c1445a13823aa84cc88e2a755c09
-
SHA1
2f056af9527c3a7dc9415224a41762b7a3a3536d
-
SHA256
8b341d5f19d68a3430937ed6ab72aff849519646026920abc16f441f9b64c25a
-
SHA512
bd0ede8dd214131c9587cc4cfd7d2a30443639eb14a4b348123787fbeabd6724930385443fcebd6c96261a88e9294aa65251285c4b26fcba86104862bf4c3dd4
-
SSDEEP
3072:wfOFdJRGwZZ7oE15K135QDWaqWY9dyzvSS7IejUn5ZSrzNYnt+MQumof9b75Gb+P:UqywPsEqQSWsAKSkZnwBYwOr8gLs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c906c1445a13823aa84cc88e2a755c09_JaffaCakes118
Files
-
c906c1445a13823aa84cc88e2a755c09_JaffaCakes118.exe windows:4 windows x86 arch:x86
41bb9893985c39a0474b6e1525c82a68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateWaitableTimerW
ExitProcess
GetCommModemStatus
GetDefaultCommConfigA
LocalHandle
ReleaseSemaphore
WaitCommEvent
advapi32
ConvertSecurityDescriptorToAccessNamedW
CryptGenKey
CryptGenRandom
GetExplicitEntriesFromAclA
InitiateSystemShutdownW
RegDeleteValueA
RegFlushKey
RegQueryMultipleValuesA
RegQueryValueA
SetEntriesInAccessListA
StartServiceA
UnlockServiceDatabase
user32
CharUpperW
DialogBoxIndirectParamA
EnumDisplaySettingsA
GetAncestor
GetClipboardData
GetProcessWindowStation
GetWindowPlacement
MessageBeep
ModifyMenuW
SetLogonNotifyWindow
SwitchToThisWindow
UnregisterHotKey
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ