Static task
static1
Behavioral task
behavioral1
Sample
d5d005d3afc85251c997a6dee7203658_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d5d005d3afc85251c997a6dee7203658_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5d005d3afc85251c997a6dee7203658_JaffaCakes118
-
Size
52KB
-
MD5
d5d005d3afc85251c997a6dee7203658
-
SHA1
138447543be3e1659e80f486f6aa29752c1ed1e2
-
SHA256
779f8a9212e6ec4296380e65beafdb6acfd7ffac8d87c96df20eca1405d0c064
-
SHA512
efea00e182217e99c7eefa225bd5452175270636c52fe8b6292f8d8a5c119617479a3edb3d85f526b62c731fc0199986c10c109d4b7bb2a729fc68a725d49cb8
-
SSDEEP
384:TrCZPVZzYBcNeLNek+vDdngH0gKH9p7DZ3TDRxVx16U4gU9qqejMnnisp6/:TINZ3nylI/DZ3BX3jU9jUsnI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5d005d3afc85251c997a6dee7203658_JaffaCakes118
Files
-
d5d005d3afc85251c997a6dee7203658_JaffaCakes118.exe windows:4 windows x86 arch:x86
fad0febbe7f623ea70d7f8f3fdd8c0ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
ResetEvent
GetDateFormatA
GetCommandLineA
SetLastError
GetLastError
VirtualProtect
IsBadReadPtr
IsBadStringPtrA
GetDriveTypeW
LocalFree
GetModuleHandleA
FreeConsole
CancelIo
SetLocalTime
CloseHandle
EnumResourceTypesW
FindClose
LoadLibraryExW
GetDiskFreeSpaceExA
advapi32
RegCloseKey
FreeSid
AccessCheck
OpenEventLogA
RegCreateKeyExA
GetLengthSid
RegEnumKeyExA
CloseTrace
LsaFreeMemory
LsaClose
CloseEventLog
GetFileSecurityW
IsTokenUntrusted
RegCloseKey
hnetcfg
HNetDeleteRasConnection
DllGetClassObject
HNetFreeSharingServicesPage
DllRegisterServer
HNetGetSharingServicesPage
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE