Static task
static1
Behavioral task
behavioral1
Sample
df2151812660918f22ac8cdec4af988b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df2151812660918f22ac8cdec4af988b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df2151812660918f22ac8cdec4af988b_JaffaCakes118
-
Size
382KB
-
MD5
df2151812660918f22ac8cdec4af988b
-
SHA1
2238c2e8b51c759257734777b5733e1a9eb7ca8a
-
SHA256
68847f0bea1fcadc57ce69010041f30aff7ea355cabe1541b3d756eb69f260bf
-
SHA512
a0533e3512532272098d0c1162e0a60be4c34d893b2160c184d85a2042b946131bc45356cb849560f80f35b937c152528733ceb71370a1009578adabf9fd544f
-
SSDEEP
6144:9rSa9HRMsrPanRgkr/TbWz6b+vzR1vED0sj+SBl4qA4/qylPzgNbwjZUE79rlnMp:lS0HRM2CRn/Tq2K7R100E++l4qh/qab3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df2151812660918f22ac8cdec4af988b_JaffaCakes118
Files
-
df2151812660918f22ac8cdec4af988b_JaffaCakes118.exe windows:4 windows x86 arch:x86
800a7233aa100a4c2af4807cd1a7044c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
lstrlenA
GetEnvironmentVariableW
GlobalFlags
InterlockedExchange
WriteFile
LocalFree
GetDriveTypeA
ReleaseMutex
LoadLibraryW
GlobalFree
SetEvent
GetLocalTime
IsBadStringPtrA
GetCurrentProcessId
GetCurrentThreadId
VirtualAllocEx
CreateEventW
GetPrivateProfileIntA
CloseHandle
advapi32
IsValidSid
RegCreateKeyExW
RegEnumKeyA
RegCloseKey
IsValidSecurityDescriptor
ControlService
CreateServiceW
IsTextUnicode
InitializeSid
ClearEventLogW
RegQueryValueW
RegDeleteValueA
CloseEventLog
InitializeSid
loghours
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
DialinHoursDialog
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ