Static task
static1
Behavioral task
behavioral1
Sample
0019de5ff7942a65c66f24bf4910d8b0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0019de5ff7942a65c66f24bf4910d8b0_JaffaCakes118
-
Size
424KB
-
MD5
0019de5ff7942a65c66f24bf4910d8b0
-
SHA1
45b20773ff35c13f1ecd860eeb25f69395b98302
-
SHA256
e6fc04202f82e5f1ee0d7f332ee2a5ac5584da5f36d427906c2ab4a5390ee181
-
SHA512
862fb9d6b712e67745ec077761bce6a8fdc86720ccab1b7ee81b77ebbfbb59bc4af6a3b853661bd1792f205bc16bf0a2d1b2ee1e47913177846f2f0f5d93ee29
-
SSDEEP
12288:Gc+qMIOrxbYafT0PQIo9TKuevf5S9uaCEqGiBlaV:mLVqeT0Ytq5u/fsa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0019de5ff7942a65c66f24bf4910d8b0_JaffaCakes118
Files
-
0019de5ff7942a65c66f24bf4910d8b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
62bf86c9028676f34dacc2aaa9d8f064
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA
user32
CharLowerBuffA
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
advapi32
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueA
Sections
.text Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ