Static task
static1
Behavioral task
behavioral1
Sample
2434e74a5adcf1530d186b9e014db3e3_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
2434e74a5adcf1530d186b9e014db3e3_JaffaCakes118
-
Size
196KB
-
MD5
2434e74a5adcf1530d186b9e014db3e3
-
SHA1
76593f8cda816b7d4671a19c8de10c81a1fcf6f5
-
SHA256
a3f8f0f0229d7c0907a6e4c47a9f4b47ef3d9d1097a71796cbb6517ede83b4d2
-
SHA512
92cae0c934e45655fc24b2f8de777fae3d05bccf38cd950b664b380f9c48d71264431ce45bc0a57c852d77d1d20b31e5ca834d61047dc334606a93f72b186e93
-
SSDEEP
3072:fAvd9J7NZ3zANXgmIAjzp8CKi/nRkkBpuEPFCh0/p/nRCWY86bIWLu4Nrme/1Zm:fAbJ7ANXdIAjDd/7pzP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2434e74a5adcf1530d186b9e014db3e3_JaffaCakes118
Files
-
2434e74a5adcf1530d186b9e014db3e3_JaffaCakes118.exe windows:6 windows x86 arch:x86
60590a8f8121fea49396bc987601ca49
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextW
oleaut32
LoadRegTypeLi
kernel32
FindNextChangeNotification
FillConsoleOutputCharacterA
ExitProcess
GetPrivateProfileSectionNamesW
GetThreadPriority
GetTimeZoneInformation
GetSystemDefaultUILanguage
FreeConsole
GetTickCount
DosDateTimeToFileTime
CreateSemaphoreW
SetCommBreak
Heap32First
GetCommandLineW
UnregisterApplicationRecoveryCallback
user32
GetClassWord
DefDlgProcW
AddClipboardFormatListener
SetCapture
DefMDIChildProcW
GetSubMenu
GetClipboardViewer
LoadKeyboardLayoutW
advapi32
CreateWellKnownSid
DeleteAce
LogonUserA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-HkVVe|m Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt2 Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pk Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ