Static task
static1
Behavioral task
behavioral1
Sample
fb625b82af5c9818299a4136b761fdfc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fb625b82af5c9818299a4136b761fdfc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb625b82af5c9818299a4136b761fdfc_JaffaCakes118
-
Size
129KB
-
MD5
fb625b82af5c9818299a4136b761fdfc
-
SHA1
ffee9a2bc92b214d550de756131c3912594e384b
-
SHA256
704bca2283fa657a706aee7c67fde8228a08c43079c26423a3c512ac659b3f65
-
SHA512
570af00be78b12b66059168e1f636e45713dc4a0b97b34440393b308c8c23a3a73dd2451302c25704906af0ccc51c64da23cdb855ab58325ec5eb9cb6b7c1914
-
SSDEEP
3072:6VTjLAtFAtFc7eaWgY9Ml3bqleFAZUrKY7ZM4aJ:6VKFn/YLty/7a1J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb625b82af5c9818299a4136b761fdfc_JaffaCakes118
Files
-
fb625b82af5c9818299a4136b761fdfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe392267c6605239fa01871e67891c39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
IsBadReadPtr
LocalFree
TlsGetValue
VirtualProtect
CloseHandle
GetDiskFreeSpaceExA
GetCommandLineA
GetLastError
EnumResourceTypesW
IsBadStringPtrA
GetModuleHandleA
FreeConsole
Heap32First
CancelIo
SetLastError
ResetEvent
LoadLibraryExW
GetLogicalDrives
SetLocalTime
advapi32
FreeSid
IsTokenUntrusted
LsaFreeMemory
LsaClose
RegCreateKeyExA
RegEnumKeyExA
GetLengthSid
RegDeleteKeyA
GetFileSecurityW
CloseEventLog
RegCloseKey
RegEnumValueA
RegQueryValueA
RegCloseKey
hnetcfg
HNetDeleteRasConnection
HNetGetSharingServicesPage
HNetFreeSharingServicesPage
DllRegisterServer
DllGetClassObject
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE