Static task
static1
Behavioral task
behavioral1
Sample
f1e9560e4d41e9be53ec471a85ab49cc_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
f1e9560e4d41e9be53ec471a85ab49cc_JaffaCakes118
-
Size
108KB
-
MD5
f1e9560e4d41e9be53ec471a85ab49cc
-
SHA1
3f725f3a7555732a768230942e4dd624f31f4fc9
-
SHA256
f898c89566f877f98b2f1a375c3e0dc30d1d52fe684d0a8f2925661defc34242
-
SHA512
378c099776f30f4fc820e11c05e4ff57f9328467951ed87ab155ce710af112ff81e3269045014f6910f33dadce50f923c95848be97611b5da17771acd87e1131
-
SSDEEP
1536:i1PJHXUHhWBEebEdhJnM8x1OIyHlL3kZskkSPpiKDkD:S3UHhWKm8/eDlbjCVDk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1e9560e4d41e9be53ec471a85ab49cc_JaffaCakes118
Files
-
f1e9560e4d41e9be53ec471a85ab49cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
780d1a77b42bd0a7ab56592e8887b699
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
WriteConsoleInputA
WriteConsoleOutputA
WriteFileEx
PeekNamedPipe
SetFilePointer
FindNextFileA
GetCommandLineA
ExitProcess
GetProfileSectionA
HeapAlloc
lstrcpyA
GetStartupInfoA
GetConsoleAliasesLengthA
SetDllDirectoryA
GetDefaultCommConfigA
GetDateFormatA
SetCurrentDirectoryA
WriteConsoleInputA
Toolhelp32ReadProcessMemory
GetDriveTypeA
GetConsoleOutputCP
GetThreadLocale
VirtualAllocEx
user32
IntersectRect
CharUpperBuffW
GetClipboardFormatNameA
SendNotifyMessageA
GetWindowRgnBox
SetCursorPos
CharUpperBuffW
CreateAcceleratorTableA
InSendMessageEx
IsWinEventHookInstalled
LoadKeyboardLayoutEx
CloseClipboard
OpenIcon
LoadIconA
RegisterClassExA
RecordShutdownReason
GetScrollRange
MonitorFromWindow
imagehlp
ImageNtHeader
ReBaseImage
ImageLoad
FindDebugInfoFileEx
advapi32
RegQueryValueA
RegOpenKeyA
RegSetValueExW
RegSaveKeyA
Sections
.textbbs Size: 4KB - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 92KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ