Static task
static1
Behavioral task
behavioral1
Sample
3237de2d35391b8c33dc1e5c656b8bb4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3237de2d35391b8c33dc1e5c656b8bb4_JaffaCakes118
-
Size
29KB
-
MD5
3237de2d35391b8c33dc1e5c656b8bb4
-
SHA1
7af3466eb3aefe4b17169939292b51e42a6bec1c
-
SHA256
dc7e4dc81741697969c7b2100dd9dc82ceb2a67a626fa6827a615c339777b900
-
SHA512
9bd5976d60fff372897c879ea6c56332e1d8b3e175e035445803f037bb6b649029fc693c1ec392152ed887be66b4905626f4cd2b300b30a49fbd5be134856549
-
SSDEEP
384:BqQ7nsDZWopnqmajKBqETLceYWrmKMnNikr/NDpePl5UE548888DAn:r7nsDZWopajEqEXceHcncgNDQd+kn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3237de2d35391b8c33dc1e5c656b8bb4_JaffaCakes118
Files
-
3237de2d35391b8c33dc1e5c656b8bb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
47a2a8dd16669e468cd70dafa9be8927
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WaitForSingleObjectEx
TerminateProcess
WriteProcessMemory
CreateProcessA
CreateProcessW
CreateProcessW
WaitForSingleObject
CreateProcessW
VirtualProtectEx
CreateProcessA
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetFileAttributesW
CreateFileA
WaitForSingleObject
VirtualProtectEx
ReleaseMutex
LoadLibraryExW
VirtualProtect
ReleaseMutex
CreateProcessA
ReleaseMutex
GetSystemTimeAsFileTime
Sections
.text Size: 19KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ