Static task
static1
Behavioral task
behavioral1
Sample
35d9ed4bd30396dc2852a623aff92026_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
35d9ed4bd30396dc2852a623aff92026_JaffaCakes118
-
Size
284KB
-
MD5
35d9ed4bd30396dc2852a623aff92026
-
SHA1
bb114ec243880ffdadabe426acdaa90ffa7815f5
-
SHA256
e893ccd2fc51066866da86386778581ab11f25ea7f76f6577082c1088e7cc319
-
SHA512
610acf489944fb2935ba6857795a52ca550b73d3eb83ebf4c940af24adbf919da932ea220d0091c1184fb4e589002ae5dd232670aa555f5cf3fd516a60ac0f98
-
SSDEEP
6144:V0RJsa0dPA4NNXw0hlx1qepW2cV4/LoDgCJM9/fACv:+XzklN9zx1qGMV4/LT79Zv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35d9ed4bd30396dc2852a623aff92026_JaffaCakes118
Files
-
35d9ed4bd30396dc2852a623aff92026_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbeb3549126b8d59fb9773bc91f8e52e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
LocalFree
FindAtomA
GetCurrentDirectoryW
CreateDirectoryW
GetModuleFileNameW
SetLastError
GetModuleHandleA
LocalAlloc
VirtualProtect
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
GetFileInformationByHandle
SetEnvironmentVariableW
OutputDebugStringA
EnumResourceLanguagesA
MultiByteToWideChar
GetFileAttributesW
SearchPathW
GetStringTypeExW
OutputDebugStringW
WideCharToMultiByte
lstrcmpiW
ExitProcess
lstrlenW
VirtualQuery
InterlockedExchange
shlwapi
StrRetToStrA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
Sections
.text Size: 139KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ