Static task
static1
Behavioral task
behavioral1
Sample
146fba118d2a8349343c767b53577a49_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
146fba118d2a8349343c767b53577a49_JaffaCakes118
-
Size
816KB
-
MD5
146fba118d2a8349343c767b53577a49
-
SHA1
79ba21fd75c2b1b3f24d20a5e1efe9fa72fc59b5
-
SHA256
47fa0636060276fad2f4fd938f2ae997af4cf2b9db843731cd714ae439be58d6
-
SHA512
c5d41fdfee422a07d7cab1929a3899a5c2da34e47430728d9c96251b6de8526e96e56bb2625ad74225aa8e20fe833790bec6dbf58d609eb7e587bc4770034213
-
SSDEEP
12288:MJ7ypITbfGMy8I6eAwibYAQD0Xwv7bRLDiIX/v+Y4uyzTKoR0TAZHYkIhvIOU:Sy+T46jKD93RSIXOvz+A8xIJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 146fba118d2a8349343c767b53577a49_JaffaCakes118
Files
-
146fba118d2a8349343c767b53577a49_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d207e9ce8eb48e72929c9ad5814bc6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
SetThreadPriority
VirtualQuery
ReleaseMutex
Beep
GetModuleHandleA
Beep
Beep
VirtualProtect
GetPrivateProfileIntA
SetCurrentDirectoryW
Beep
Beep
FormatMessageA
Beep
DeleteFileW
Beep
Beep
TlsGetValue
GetFullPathNameW
Beep
GetModuleFileNameW
SetLocaleInfoA
WriteConsoleW
lstrcatA
lstrlenW
Beep
TlsSetValue
catsrvut
CGMIsAdministrator
StartMTSTOCOM
RegDBBackup
RegDBRestore
Sections
.TEXT Size: 15KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ndata Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.vdata Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ