Static task
static1
Behavioral task
behavioral1
Sample
04947781e17d39d721df17c5afb05130_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
04947781e17d39d721df17c5afb05130_JaffaCakes118
-
Size
139KB
-
MD5
04947781e17d39d721df17c5afb05130
-
SHA1
8473d4dfd99b28380f1d44ac6061a2963ac17171
-
SHA256
f93c64a025f378aab915e7ea82b821ccb29b53fa316d62895dbbb71a6726f934
-
SHA512
178503708c750a6e3ef78d17d2fe65fddf6d0f862a96e3413358f8a67c1e5e2048050fc139cda46c2cef63b3cfba75af06b135dba61f71d84200c5a3e9d0a52b
-
SSDEEP
3072:U4uvdnFexUVJHe5jwaaHw7Koj4riWOlS8srf/02f:dUVBeNRCrfbf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04947781e17d39d721df17c5afb05130_JaffaCakes118
Files
-
04947781e17d39d721df17c5afb05130_JaffaCakes118.exe windows:65535 windows x86 arch:x86
01349cd52252c8daba32231dc2bbde68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__fmode
__set_app_type
__p__commode
_except_handler3
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr1 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE