Static task
static1
Behavioral task
behavioral1
Sample
176d2981b4e984a3a41d826530922e52_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
176d2981b4e984a3a41d826530922e52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
176d2981b4e984a3a41d826530922e52_JaffaCakes118
-
Size
83KB
-
MD5
176d2981b4e984a3a41d826530922e52
-
SHA1
0ded3ede8f65de1b7cefb89a69deaaecb1e6a0a2
-
SHA256
80849744baabdd38d37f574cf49725ded94a5ebb0bd0e214930f76df4a15e6b4
-
SHA512
26d422b92af5d61a0042e260a25794a3214dcbb7562cff3cad0c28b8eb761a17ec7a894f265d5ae54e70ec68f9b6054539f360a6f00f4913320bf4c83a96c748
-
SSDEEP
1536:vRPKl9d0krpwcdgruWZtXZIj2wr1PPleifxoxEE34jEErxTWDTMqhGKYIZTET8bc:5PKl9SklwcdgKG61XeojBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 176d2981b4e984a3a41d826530922e52_JaffaCakes118
Files
-
176d2981b4e984a3a41d826530922e52_JaffaCakes118.exe windows:4 windows x86 arch:x86
d80cc34b7b0d5fc3a67df4f3a6d300f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
LZOpenFileW
GetWindowsDirectoryW
lstrcpyA
FindActCtxSectionGuid
GetPrivateProfileIntA
HeapLock
CreateDirectoryA
EnumLanguageGroupLocalesA
Module32First
ReadConsoleA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE