Static task
static1
Behavioral task
behavioral1
Sample
56d04f7f766013fc2427ec355c8f0379_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56d04f7f766013fc2427ec355c8f0379_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56d04f7f766013fc2427ec355c8f0379_JaffaCakes118
-
Size
322KB
-
MD5
56d04f7f766013fc2427ec355c8f0379
-
SHA1
76ae2eacd9561f7a25351823c027c34aa63b6941
-
SHA256
c154764d42b3664e12b68b730a8637f869ceca03996c456f74469c72a86eb3a9
-
SHA512
2976a65c1f7f405045c37d13d63841cdb17675498148d86ff092a752d5c105197f42360ca49e43bfc524a010e9d9b47d46f5782b80c8f949615163fa26027ec5
-
SSDEEP
6144:GNghBmLfarhgC06c3Qfz7A5HppptFwro3beujIEC4Hr5LAoD:8gLm2riECuz7A5JDwo3beGZL5Lz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56d04f7f766013fc2427ec355c8f0379_JaffaCakes118
Files
-
56d04f7f766013fc2427ec355c8f0379_JaffaCakes118.exe windows:5 windows x86 arch:x86
f427f2745504b76abc777a4fbc94f767
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
CStdStubBuffer_IsIIDSupported
NdrOleFree
CStdStubBuffer_Disconnect
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_QueryInterface
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
ntdll
_itoa
NtAllocateVirtualMemory
NtAdjustPrivilegesToken
Sections
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE