Static task
static1
Behavioral task
behavioral1
Sample
8399e22a618497da4fb73205fdecebcd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8399e22a618497da4fb73205fdecebcd_JaffaCakes118
-
Size
644KB
-
MD5
8399e22a618497da4fb73205fdecebcd
-
SHA1
7ead998adc1969b7917195e76188bbce7f1c6f4a
-
SHA256
022e216bc025cf6c4dd9b478f81bf6290b933ec78488696f7a9b88199d7739a0
-
SHA512
3e5de840115b3c33dc1b384d3353a8ac933259836cd83c1333e71dde3e6c08a69cd91134903c12ad40b44356c60cbdc077f5fbecc16d43c17cb386dd48becf05
-
SSDEEP
12288:IJdTK+HwbCV94hNQNxfKnvHz50gOVyajK1TTHEB18GmWjApG:IJTh/svHCg2yaSTHq8Pt8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8399e22a618497da4fb73205fdecebcd_JaffaCakes118
Files
-
8399e22a618497da4fb73205fdecebcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
290af1763bdb0155222562231ddd3c3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
CreateFileA
ExitProcess
CloseHandle
LCMapStringA
user32
wsprintfA
SetWindowLongA
CloseWindow
CharLowerBuffA
CreateWindowExA
advapi32
RegDeleteValueA
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
Sections
.text Size: 574KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ