Static task
static1
Behavioral task
behavioral1
Sample
d6b3c6236c24f0e1d7e3039b728f6050_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d6b3c6236c24f0e1d7e3039b728f6050_JaffaCakes118
-
Size
124KB
-
MD5
d6b3c6236c24f0e1d7e3039b728f6050
-
SHA1
b29eff99478244cdae6d1b908f30b75ea5a61c80
-
SHA256
dc976539ccfe2ac4e4bd9d853d802b697af9e108df73ac6e325398665ef48ffd
-
SHA512
2861ee5fc678e6609dec714105bb4fbe218d5118a03c8d6ce8e92d3ff4e4ac8e477dda68dcea191738659d0d5a93113fc803c2f275a11aa437e22d47335d6e71
-
SSDEEP
3072:hr/S7cy3d0QrV/Qx3ybxveOTbXeZcw1k5ZL/zS:hra7z3CQNQpge743L/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6b3c6236c24f0e1d7e3039b728f6050_JaffaCakes118
Files
-
d6b3c6236c24f0e1d7e3039b728f6050_JaffaCakes118.exe windows:5 windows x86 arch:x86
68f4593a046c02013bb40899e2139ddf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
lstrcatA
LoadLibraryExA
CopyFileW
FindResourceA
OpenSemaphoreW
OpenFileMappingA
GetProcAddress
CreateWaitableTimerW
GetCommandLineA
GetVersionExW
VirtualFree
IsBadStringPtrA
CreateFileW
GetModuleHandleA
InterlockedIncrement
GetStartupInfoW
LoadLibraryExW
modemui
drvGetDefaultCommConfigA
drvCommConfigDialogA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qdata Size: 94KB - Virtual size: 94KB
IMAGE_SCN_MEM_READ
.ydata Size: 1KB - Virtual size: 112KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RsRC Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ