Static task
static1
Behavioral task
behavioral1
Sample
82ebd4b370172edf26561ea57718068a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
82ebd4b370172edf26561ea57718068a_JaffaCakes118
-
Size
313KB
-
MD5
82ebd4b370172edf26561ea57718068a
-
SHA1
ac6d08144a42386477bc2aa3c3adf3a242d80d34
-
SHA256
542583b18f95ae34223249256de8642c9a471f647d4cc56a8f632092631864e0
-
SHA512
8eb7a9d7dc5e4d2529cbe51300d5bc2f90370ca7a3810738105e7f487c520be92b2b693e0ee1752ba0b9b571b7e9afa4f049889431d4188d3e686801a59433fb
-
SSDEEP
6144:O2odMjmSyNTGUap5sYhRwiUXlJidFJVR0P8zP8qWFATBgmySvH1:0dM61PaDsePUPGvn8FUgr+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82ebd4b370172edf26561ea57718068a_JaffaCakes118
Files
-
82ebd4b370172edf26561ea57718068a_JaffaCakes118.exe windows:4 windows x86 arch:x86
952acfd93d5d85b04d6e2551ab42acc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetStdHandle
RaiseException
LoadLibraryExA
SetCommBreak
LocalSize
ExitThread
GetOEMCP
GlobalFree
SetConsolePalette
LoadResource
GlobalAddAtomA
GetProcessHeap
EnterCriticalSection
CloseHandle
GetProfileStringA
GlobalFindAtomA
GlobalLock
DeleteAtom
GetLocalTime
lstrcpyn
user32
GetClassNameA
ValidateRect
GetForegroundWindow
GetWindowTextA
EndPaint
ShowWindow
AlignRects
GetClassInfoExA
ReleaseDC
GetWindow
CloseWindow
BeginPaint
IsIconic
GetFocus
DrawEdge
GetParent
GetActiveWindow
GetDC
GetWindowTextLengthA
wsock32
WSAAsyncGetServByPort
WSAGetLastError
WSACleanup
WSAStartup
WSASetBlockingHook
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ