Static task
static1
Behavioral task
behavioral1
Sample
27e2280012b0a0dd8c6cdc667476b72c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
27e2280012b0a0dd8c6cdc667476b72c_JaffaCakes118
-
Size
112KB
-
MD5
27e2280012b0a0dd8c6cdc667476b72c
-
SHA1
53d76c2d0db395ea640e41e8a025b9c29cc496a4
-
SHA256
c8621ebef027979babdbb033c4f5cb5ee87e124d033d308c9763d33190efbf66
-
SHA512
98daffb183fbd1ce51d38992548c1cfb8455f94eb6dafae04287d50bc30226d66a4201ced7759fe0a09da931aaf6e90afe7f36db01b4e914d272f09376c0dd5f
-
SSDEEP
1536:VVuaHiKj8joC0hQFz8A/q/YxdfS+brba4ja9JyrRn3dmrli1B0:WlpjoWF3bva4jCJyrR3Arh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e2280012b0a0dd8c6cdc667476b72c_JaffaCakes118
Files
-
27e2280012b0a0dd8c6cdc667476b72c_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0566c197d523011f38d076534318a21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
LockResource
LoadResource
FindResourceA
ReadFile
SetFilePointer
SizeofResource
GetSystemDirectoryA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
DeleteFileA
CreateFileA
WriteFile
CloseHandle
GetFileSize
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeW
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ