DFM1gCeg
Static task
static1
Behavioral task
behavioral1
Sample
4d5656f693983bcede05aa5d8da480de_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
4d5656f693983bcede05aa5d8da480de_JaffaCakes118
-
Size
319KB
-
MD5
4d5656f693983bcede05aa5d8da480de
-
SHA1
2c5fd5fb7feb42d74a2ea3b23ad2f5d3b543eafa
-
SHA256
ef957c8e671f25c86c13023bc2337171e382b3e4a60e2be7de03f8a9d61619e9
-
SHA512
a328676495bbf56a83d3c804477805bf8c7ac1b7badfc645f7a6d525da037ff3618892df499ea514ea4ed671b6727191a27b6b3715cb612548aa3594e0ebaed6
-
SSDEEP
1536:YJEPyzHEbfLiVT4iHtGtJ7goSUhi+dJF+JHmTnLCt/:YJEPeyS4BZ8+Km/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d5656f693983bcede05aa5d8da480de_JaffaCakes118
Files
-
4d5656f693983bcede05aa5d8da480de_JaffaCakes118.exe windows:5 windows x86 arch:x86
cbfac9674884ccfdb294c2ae9a488fa4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
GetBinaryTypeA
GetPrivateProfileSectionA
lstrcmpW
FlsFree
GetCurrencyFormatW
GetAtomNameA
lstrcpynA
FindFirstChangeNotificationA
secur32
DecryptMessage
InitializeSecurityContextW
lz32
LZSeek
advapi32
EnumServicesStatusExW
LookupPrivilegeNameA
EnumServicesStatusW
RegCloseKey
gdi32
GetTextExtentExPointI
GetCharWidthA
GetDIBits
user32
GetClipCursor
GetDlgCtrlID
LoadMenuA
GetClassLongA
LookupIconIdFromDirectoryEx
GetMessageExtraInfo
GetMessagePos
GetDialogBaseUnits
GetInputState
wsprintfA
GetMenuContextHelpId
oleaut32
GetErrorInfo
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ