Static task
static1
Behavioral task
behavioral1
Sample
29990885ea7701c65a94e57b5c82b82a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
29990885ea7701c65a94e57b5c82b82a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29990885ea7701c65a94e57b5c82b82a_JaffaCakes118
-
Size
322KB
-
MD5
29990885ea7701c65a94e57b5c82b82a
-
SHA1
a38d6bc7725ebb4c8577f78b276bde74d42ae4d2
-
SHA256
cf1dd189fa799017a9efbb3d7dab460cfdafc2aa949b5552c18cdd80b5741a17
-
SHA512
2fda8a6652735cb0baf2e99e7e66d8afbdc32da4f436c804c8f9ba184f833a908afce384fb5c6cb2cc6c88216e9c8859a22cad01ca6b82ad11442c4867db097e
-
SSDEEP
6144:2a8rysjnUYaqfK6xTV6bKSO6OwGDrkLflUsT9g3CQsMSTHozx:2Nry0VfzTV6uCOjcUXCf+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29990885ea7701c65a94e57b5c82b82a_JaffaCakes118
Files
-
29990885ea7701c65a94e57b5c82b82a_JaffaCakes118.exe windows:5 windows x86 arch:x86
0969e05587264c2204c270f23242c70c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAllocateVirtualMemory
NtAdjustPrivilegesToken
_itoa
rpcrt4
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerRelease
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
IUnknown_Release_Proxy
NdrDllGetClassObject
CStdStubBuffer_CountRefs
NdrCStdStubBuffer_Release
NdrOleAllocate
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
NdrDllCanUnloadNow
CStdStubBuffer_Connect
NdrOleFree
CStdStubBuffer_QueryInterface
Sections
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE