Static task
static1
Behavioral task
behavioral1
Sample
438a70bd146a16aa578b7b50bc4c1c55_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
438a70bd146a16aa578b7b50bc4c1c55_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
438a70bd146a16aa578b7b50bc4c1c55_JaffaCakes118
-
Size
606KB
-
MD5
438a70bd146a16aa578b7b50bc4c1c55
-
SHA1
f3384b62a26c952681c87bf0b6e2666c96ce71b1
-
SHA256
94ddeef086b585dcbabedb526965414b94fe0c00b691b7b75e5c34084f1446b1
-
SHA512
45bcdc16262f10f878df629806659964fad6555d07a284c0c4b3527c2cf3b75dcb739910197600b8e409abc2307d7095aa2b4779e75d3102b6696bc565ddc317
-
SSDEEP
12288:fxWxvKjrJnULI0FV1KefO4bUwBG+tIe1YUyF2I/jRrwm0vbDXx7sTQZ0YHQRnPm3:pWxvYrifoeZbUw3f0h9IDh7ssBgnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438a70bd146a16aa578b7b50bc4c1c55_JaffaCakes118
Files
-
438a70bd146a16aa578b7b50bc4c1c55_JaffaCakes118.exe windows:5 windows x86 arch:x86
45baee456234deecfe576a978ce682e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
RegCloseKey
user32
wsprintfA
msvcrt
strcmp
ws2_32
socket
ntdll
NtQueryVolumeInformationFile
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs0 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs1 Size: - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs2 Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ