Static task
static1
Behavioral task
behavioral1
Sample
82b202d58b2e63207ef3dea0b76d102c_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
82b202d58b2e63207ef3dea0b76d102c_JaffaCakes118
-
Size
444KB
-
MD5
82b202d58b2e63207ef3dea0b76d102c
-
SHA1
22a100b6db1880807ea7eeb4bd3439769481b0d0
-
SHA256
b66e79babaa49fa58aae643943e97932206e0999effbc9b2a4b2104c817a543e
-
SHA512
09344bd010fa95af11387663fc75ae7aff45ec7f9d964c9342db2fdc4efca997fc7fd171c14f760c1ca8d1d3b8b4024c91ef22e90f26d0d8f19c0b49a04e6330
-
SSDEEP
3072:kDeZmhdv4fO9xUqCvKmefgnaeoRdh6JXHtJPpRI362kNx3:ODv4G9xIvKmkgaHWJXLHI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82b202d58b2e63207ef3dea0b76d102c_JaffaCakes118
Files
-
82b202d58b2e63207ef3dea0b76d102c_JaffaCakes118.exe windows:5 windows x86 arch:x86
2c0687ff86686c54884df40a2672add3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
wintrust
CryptCATOpen
ntdll
RtlCaptureStackBackTrace
kernel32
GetNamedPipeClientProcessId
GetTimeZoneInformation
GetStringScripts
GetUserDefaultLangID
GetTickCount
ExpandEnvironmentStringsA
GetModuleHandleA
AreFileApisANSI
SetFileApisToANSI
SetFileApisToOEM
GetCurrentProcess
winscard
SCardForgetCardTypeW
lz32
LZSeek
mprapi
MprAdminTransportSetInfo
user32
DdeConnect
pdh
PdhSetDefaultRealTimeDataSource
ws2_32
WSACancelAsyncRequest
ole32
CoInvalidateRemoteMachineBindings
Sections
.text Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ