Static task
static1
Behavioral task
behavioral1
Sample
19434b68dce38358976ff704c0512fd8_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
19434b68dce38358976ff704c0512fd8_JaffaCakes118
-
Size
170KB
-
MD5
19434b68dce38358976ff704c0512fd8
-
SHA1
ba8b51dc26ce5037e63962a275424d816bba59e2
-
SHA256
9ed7f628fee3dfcdca9af505c5fd4f5af7c444935b8333ecc9e68f7e40f91d6f
-
SHA512
8bb95aba80f340986990f2dc7bbe9416e606a821209284496892b8c7f2646e625a23d680960ab3c4c27b8c246050c931f8b61dbd503c539b153930d9f38a1390
-
SSDEEP
3072:T8GTz/JX5BC/DXDl4sggpY7RDbfCMK51VJ5xEP1DYGnSkprg:TZTzBX5Be/esMXfCvJjc1DYRkpc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19434b68dce38358976ff704c0512fd8_JaffaCakes118
Files
-
19434b68dce38358976ff704c0512fd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
1046fe1a181ce900d0ee38dc18c9331f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
CoSetProxyBlanket
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitializeSecurity
CoQueryProxyBlanket
StringFromGUID2
rpcrt4
UuidCreate
kernel32
RaiseException
LeaveCriticalSection
GetCalendarInfoW
IsValidCodePage
VirtualFree
ExitProcess
SetEndOfFile
HeapDestroy
GetCPInfo
HeapSize
EnterCriticalSection
SetFilePointer
GetStartupInfoA
EnumResourceNamesA
FreeEnvironmentStringsA
HeapReAlloc
GetOEMCP
GetACP
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
RtlUnwind
ReadFile
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ