Static task
static1
Behavioral task
behavioral1
Sample
3f60c6d4d29142f70220b4d614812cd9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3f60c6d4d29142f70220b4d614812cd9_JaffaCakes118
-
Size
108KB
-
MD5
3f60c6d4d29142f70220b4d614812cd9
-
SHA1
994e700a1f5ceb8a6e22271754e4a615fc34d994
-
SHA256
8249ce50712bfa53b08cda2099581575a7941ce4f9fb4066a6bfe642a15d91f1
-
SHA512
81ab24e08017321f8c788c6fb4fb5c975cf5995045b208d93acd1f52e510b2808a2c0c73dedef7a159a549344933fb65f2c8a594cf0e1f5f9bd66dc8d6df8ff4
-
SSDEEP
3072:r9kUf8uiJLZ8SmCYCMAxPBteM2FFk8jwaaHw7Koj4rvRZzw:hkUQJLZ8CmM2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f60c6d4d29142f70220b4d614812cd9_JaffaCakes118
Files
-
3f60c6d4d29142f70220b4d614812cd9_JaffaCakes118.exe windows:65535 windows x86 arch:x86
90f15c009c53bf0d5df1fb18fae483f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA
advapi32
RegQueryValueExA
RegFlushKey
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegConnectRegistryA
RegSetValueExA
RegQueryInfoKeyA
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE