Static task
static1
Behavioral task
behavioral1
Sample
962d702bc25473a1b9aeb8458effd9ca_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
962d702bc25473a1b9aeb8458effd9ca_JaffaCakes118
-
Size
172KB
-
MD5
962d702bc25473a1b9aeb8458effd9ca
-
SHA1
d462263b10ed75156d46049560b73b40a8473adc
-
SHA256
e56b4363647908dd96544ce6374c4f58d6cb01c6ee8845bbce2c8f06423eab95
-
SHA512
98cb66059239df193acdb92a205501487ce420313a057dd3504255faf7d06a884d4d28ea991cf1de34a1015a9007447118014c739db3fc01692bca1a543ac4eb
-
SSDEEP
3072:T308mm/pJYRQgwAQgxYf07uIIPhvpE6cXjA8iVUAWGaqqqBSpXuWMfujoMITjWz:TE8mmpM7/EFpkXsDePGaqqqBmMfujPD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962d702bc25473a1b9aeb8458effd9ca_JaffaCakes118
Files
-
962d702bc25473a1b9aeb8458effd9ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7831108adbbad8660a81661e7ebe8f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mapi32
ord130
ord155
ord11
ord19
ord23
ord44
ord132
ord133
ord17
ord13
ord21
ord15
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
CoCreateInstance
kernel32
GetEnvironmentStrings
GetACP
GetSystemDirectoryA
GetModuleFileNameA
HeapAlloc
HeapFree
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
VirtualAlloc
FreeLibrary
lstrcpyA
lstrlenA
GetProcAddress
LoadLibraryA
lstrcmpA
CloseHandle
CreateThread
GetWindowsDirectoryA
OpenFile
GetPrivateProfileStringA
GetVersion
GetSystemInfo
GetLocalTime
lstrcmpiA
CreateDirectoryA
WriteFile
GetEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
WideCharToMultiByte
GetCPInfo
GetFileType
GetOEMCP
VirtualFree
HeapCreate
HeapDestroy
RtlUnwind
user32
SendMessageA
PostMessageA
ReleaseCapture
GetDlgItem
EnableWindow
ShowWindow
SetWindowTextA
EndDialog
SetCapture
CharUpperA
LoadStringA
DialogBoxParamA
wsprintfA
CharNextA
GetWindowTextA
comdlg32
GetOpenFileNameA
advapi32
RegEnumKeyExA
RegEnumValueA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE