Static task
static1
Behavioral task
behavioral1
Sample
429f39419b9bd4c4c448e5bee99f4d64_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
429f39419b9bd4c4c448e5bee99f4d64_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
429f39419b9bd4c4c448e5bee99f4d64_JaffaCakes118
-
Size
172KB
-
MD5
429f39419b9bd4c4c448e5bee99f4d64
-
SHA1
20bc6a72030ad388ce9f62496a60886ffa934460
-
SHA256
d8ae178e67d3edcfbc5dd2faee141448cc0fe4a4e3cd0ef4ae8047d4d5bc24d6
-
SHA512
2f0d2cf32501cfbcde2817f767767a9394f7565d4aa050765a4e1db917f65e7044ac528d94a90ef8587993728defb6e1b08fd7683d2981adeb547254cd3e3cb7
-
SSDEEP
3072:D17ukHFUMMnMMMMMX7I7Dj4mrklIBOtOXnqPVwpb02d67A/qAKRL++P/ADkEqKt5:DhdmMMnMMMMMaieSkn3pHd67AYL++Iv5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429f39419b9bd4c4c448e5bee99f4d64_JaffaCakes118
Files
-
429f39419b9bd4c4c448e5bee99f4d64_JaffaCakes118.exe windows:5 windows x86 arch:x86
a7700737fed67e0e4151d5c8ab145303
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetLastError
ntdll
RtlAddAccessAllowedObjectAce
NtRequestPort
RtlAdjustPrivilege
NtAllocateVirtualMemory
rtutils
TraceDumpExA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ