Static task
static1
Behavioral task
behavioral1
Sample
2440434e34e7cd87d94d40a7819bc2b5_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
2440434e34e7cd87d94d40a7819bc2b5_JaffaCakes118
-
Size
108KB
-
MD5
2440434e34e7cd87d94d40a7819bc2b5
-
SHA1
c6b9cff6989fe1129de2f03fc83c683e406cfc6d
-
SHA256
8f6a2d1bcae7e37357373a0183af600be0b3bbdb09bd61bb7c835cda9afc4704
-
SHA512
7ea865f4f14e8f53354940ea2af6c7ff703044eb405df0883bb7a2a83010afcff9ca4d6d7d2f8919cee5cdda1da417594914b2a2f91fb04ea9424c56bd3d33a4
-
SSDEEP
1536:BL0NP9sqyf1g5joRGwFsMl0+4zPfUkf+yZKART7BlHCZRDPrnwfAjNig+XM:GF9dyfMjoRZr6ryyZKAPtsDkfa1+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2440434e34e7cd87d94d40a7819bc2b5_JaffaCakes118
Files
-
2440434e34e7cd87d94d40a7819bc2b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
df7dcad2c36417967ae219238c8a716f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetWindowsDirectoryA
HeapReAlloc
FreeEnvironmentStringsW
WideCharToMultiByte
FlushFileBuffers
GetStringTypeW
CloseHandle
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
SetFilePointer
GetCPInfo
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetLastError
LoadLibraryA
SetStdHandle
GetACP
GetOEMCP
GetProcAddress
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStringTypeA
user32
ExitWindowsEx
MessageBoxA
advapi32
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
shell32
ShellExecuteA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE