Static task
static1
Behavioral task
behavioral1
Sample
8a0295c8c0f19ad046e3f76499da0fcf_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
8a0295c8c0f19ad046e3f76499da0fcf_JaffaCakes118
-
Size
76KB
-
MD5
8a0295c8c0f19ad046e3f76499da0fcf
-
SHA1
5e1d20096215ed66d4546d6a8e4d348f636752ea
-
SHA256
3c004f38b2843ad49896653c119b4aeab7e90b28750c41402af98726d1899a04
-
SHA512
ce100435f5596b6c7c0d9f7da92c302ec0488238838a02a4a7678ba4bf5dbcc5c0681630812f9f0c794ef880ec01e64ad1712a90b279cf5e9b06d2f1e4cf3ed8
-
SSDEEP
1536:olh+Kfw8ixRGXMMet5cI+KEzGmqT/RI99X5:0UGcMi5B+KEfqNIbp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a0295c8c0f19ad046e3f76499da0fcf_JaffaCakes118
Files
-
8a0295c8c0f19ad046e3f76499da0fcf_JaffaCakes118.exe windows:5 windows x86 arch:x86
f80a260c13471a7c0216c1d1ac4766ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
PDB Paths
Imports
kernel32
lstrlenA
LoadLibraryExA
LocalAlloc
mprapi
MprConfigGetGuidName
advapi32
RegDisableReflectionKey
shlwapi
SHRegSetUSValueW
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ