Static task
static1
Behavioral task
behavioral1
Sample
71.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
71.exe
Resource
win10v2004-20240802-en
General
-
Target
0c7bae50cbdbb224198efa6872ef0286_JaffaCakes118
-
Size
85KB
-
MD5
0c7bae50cbdbb224198efa6872ef0286
-
SHA1
779881679a2826e623e96a53aea939d8a0dc5714
-
SHA256
e4f78046517c3a2789d06d7a0e017243995acf904cb010e1ad57217443dea9bb
-
SHA512
ea79506d1c701174891d3aaaa41a36950efb54c1894340bd4cdc8acf715fa402aca0eb0d0fd8914004d609f94edc10359148f6ca620017a2b1a216f672f329a6
-
SSDEEP
1536:8j+nrW7+zUKv6a0T4S6G2wy5shQIGR6YdZVef8TyoBM55zpf3B18:++ia0s02Z5sh7G7dWETyoA9fR18
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/71.exe
Files
-
0c7bae50cbdbb224198efa6872ef0286_JaffaCakes118.rar
-
71.exe.exe windows:4 windows x86 arch:x86
7f56624f3ca3d9551d04cf7ef8b9b976
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
strlen
memmove
kernel32
GetModuleHandleA
HeapCreate
CloseHandle
HeapDestroy
ExitProcess
Sleep
CreateThread
FreeLibrary
HeapAlloc
HeapFree
InitializeCriticalSection
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
ReleaseSemaphore
user32
CallWindowProcA
wsock32
closesocket
WSACleanup
WSAStartup
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zaer Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ