Static task
static1
Behavioral task
behavioral1
Sample
64f2d3ba1c5af7ab5ad266d831a3994b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
64f2d3ba1c5af7ab5ad266d831a3994b_JaffaCakes118
-
Size
258KB
-
MD5
64f2d3ba1c5af7ab5ad266d831a3994b
-
SHA1
00269dfd14f7fe83542779d184d1339c28025363
-
SHA256
90160dac413cabeaca19fac459501c04772b2448be834415576fb1c7f4e42300
-
SHA512
a22ce0d42283d979735e0cc8c9eb00fef7b2afa45b922e49c7f069bde8736042d9f27a892eeebbae2c1e0100e4bf0f10c95cd18c02b8cdf02271364f03e9d47a
-
SSDEEP
6144:BOn8JceoSMRPdxb38ychE56tnOPQMgKhePh3wCCGJWguzplq:k8Ceopr7Hcu56NtrKoPBjmzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64f2d3ba1c5af7ab5ad266d831a3994b_JaffaCakes118
Files
-
64f2d3ba1c5af7ab5ad266d831a3994b_JaffaCakes118.exe windows:4 windows x86 arch:x86
49875b5e18d562ee27363217fc580371
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
netapi32
Netbios
Sections
CODE Size: 251KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE