Static task
static1
Behavioral task
behavioral1
Sample
12f2c61dc3865cdc704a2f15f1a92afa_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
12f2c61dc3865cdc704a2f15f1a92afa_JaffaCakes118
-
Size
392KB
-
MD5
12f2c61dc3865cdc704a2f15f1a92afa
-
SHA1
8944d929a602809927da3bf70520c4e2f9b5eb42
-
SHA256
bde67d28dec8dcc0dbe139160771ba161217a12838b92176976fe67ae5b0a10a
-
SHA512
05381e9ee4527f214e10519135e94526714b6a6acd3b896bd43955158f4bc65fc2069c4512bdcf7dcf31eb2f0e330e621274cfd18db1895160ec7123bad9e13f
-
SSDEEP
6144:jo9C1Kovqufkv8pBH/zAtmCJIJoQnqEnXQ0UMjEFuVBOzbCJy49l5VktMLm:M9SYufkv8pBHfUu9nXuMjNSfCJt777a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 12f2c61dc3865cdc704a2f15f1a92afa_JaffaCakes118
Files
-
12f2c61dc3865cdc704a2f15f1a92afa_JaffaCakes118.exe windows:4 windows x86 arch:x86
d43f9d22160dbae2ae76242e52465bfd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess
LCMapStringA
CreateFileA
user32
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA
advapi32
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
Sections
.text Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ