Static task
static1
Behavioral task
behavioral1
Sample
13568c9f590d48881873983b0310457c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13568c9f590d48881873983b0310457c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13568c9f590d48881873983b0310457c_JaffaCakes118
-
Size
101KB
-
MD5
13568c9f590d48881873983b0310457c
-
SHA1
31da4a29db682e6703a6ab8253b7b77ac829ec23
-
SHA256
05ff0968bc646e92d2162ccb7c9af820695c610c1eff6decf17f68d5279e8b75
-
SHA512
641f1649c7cd3c1b5d3553918b8798caaad160905b672eb6d0cc115f8823ed71d676a94f2a37395e2e4296958d2c1788255235ef94c9d0cdea023fc423b9caae
-
SSDEEP
1536:t9b9U0eZT2yNqgK1f5mySpm/Z+rxIkfBTo4BiMvrpmTjw6H+kM2B+ieB6:tLUTT2MqRTmRpmBSIkfBTo4JDpg+ETu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13568c9f590d48881873983b0310457c_JaffaCakes118
Files
-
13568c9f590d48881873983b0310457c_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eea605aa7b250cd480826ac4f6127aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
lstrlenA
GetTimeFormatW
GetCommandLineA
CloseHandle
GetFileAttributesA
VirtualQuery
EnumResourceTypesA
GetStartupInfoA
GetConsoleTitleA
HeapDestroy
GetEnvironmentVariableA
TlsGetValue
GetDriveTypeW
SetLastError
GetModuleHandleA
GetCommandLineA
CreateEventW
CloseHandle
GlobalFlags
advapi32
IsValidAcl
IsValidSid
InitializeSid
IsValidSid
IsValidSid
RegCreateKeyExW
RegDeleteValueA
IsValidSecurityDescriptor
RegQueryValueW
CreateProcessAsUserA
RegEnumKeyA
IsValidSid
IsValidSid
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE