Static task
static1
Behavioral task
behavioral1
Sample
da05be88c61801cbb45efd78d936f5a3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
da05be88c61801cbb45efd78d936f5a3_JaffaCakes118
-
Size
189KB
-
MD5
da05be88c61801cbb45efd78d936f5a3
-
SHA1
894389bef866053c2a8610b0593ccec1b17eb275
-
SHA256
92e2bf4ecdfbc1d16650902698b047e659e7e25ed22665aabfc0b2e22817b679
-
SHA512
54f522964e44c3654739af9522ac22f8001915846d821eff1d1742273ad1ba94e86e69c65a3c714094b20b5ecd93217888324ba88d5ed8beebe7b1ee0b7dadc0
-
SSDEEP
3072:tE2MxUfAI2tYVSAljM2APLgJAKOS3RjwqyTYSXUcjdTLZFq19KilslI:t3MxNI2WYew2+UqKOuRMVmcjfFq1Hl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da05be88c61801cbb45efd78d936f5a3_JaffaCakes118
Files
-
da05be88c61801cbb45efd78d936f5a3_JaffaCakes118.exe windows:5 windows x86 arch:x86
16bbc0f615d37e4b9ef3a6d24ab19d2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
TlsSetValue
SetCurrentDirectoryA
GetACP
InterlockedDecrement
VirtualAlloc
LoadLibraryExW
CreateJobObjectA
CreateFileW
GetCurrentDirectoryW
ReadConsoleA
GetLongPathNameW
MoveFileA
GetModuleHandleA
FreeConsole
LoadLibraryW
CreateMutexA
GetProcessHeap
OpenMutexA
Sleep
GetCurrentThreadId
RemoveDirectoryA
cmpbk32
PhoneBookEnumNumbers
PhoneBookFreeFilter
PhoneBookLoad
PhoneBookEnumCountries
user32
GetClassLongA
GetPropW
IsDialogMessageA
CreateDesktopW
PeekMessageA
LoadCursorW
InsertMenuW
IsCharLowerA
PostMessageA
DrawStateW
CreateWindowExA
DispatchMessageA
FindWindowA
LoadMenuW
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.kdata Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloh Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE