Static task
static1
Behavioral task
behavioral1
Sample
f7d12ff4a2614d59b8b277c763674b4d_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f7d12ff4a2614d59b8b277c763674b4d_JaffaCakes118
-
Size
236KB
-
MD5
f7d12ff4a2614d59b8b277c763674b4d
-
SHA1
3461fe1992d52ffc90124b36a5fa48daad25cc4d
-
SHA256
c00e0b36f3d4534227bf1bb50f6de5f80af545620ee84140d0da42ed89296e92
-
SHA512
a539ecdc3730471abc8ae0d0b9cea083553fd30f4720fa9bb047d8d6578bb83cbe7c1a361cc637e04cfcd55644f7366e125e3b172e461bde0b2c193843e3ae52
-
SSDEEP
6144:SvWtw0Bb33OFJrR19kcr4K+eUqLwdcj/8g94guQL:6kw6r3OFJrR12cn+eUU99BuO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7d12ff4a2614d59b8b277c763674b4d_JaffaCakes118
Files
-
f7d12ff4a2614d59b8b277c763674b4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d4e3ae2d2f8525fbce9a39d49a26fc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetModuleFileNameA
GetPrivateProfileStringA
CloseHandle
CreateFileA
SetThreadPriority
GetTempPathA
SetPriorityClass
GetCurrentProcess
OutputDebugStringA
GetGeoInfoA
GetUserGeoID
GetLocaleInfoA
SetLastError
GetLastError
WriteFile
CreateProcessA
ResumeThread
DeleteFileA
GetCurrentThread
CopyFileA
SetStdHandle
LoadLibraryA
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
SetFilePointer
GetStringTypeA
GetStringTypeW
GetProcAddress
FlushFileBuffers
advapi32
RegSetValueExA
RegFlushKey
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE