Static task
static1
Behavioral task
behavioral1
Sample
9d198e63f3d2e2f6bc279a52ffcfc474_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
9d198e63f3d2e2f6bc279a52ffcfc474_JaffaCakes118
-
Size
444KB
-
MD5
9d198e63f3d2e2f6bc279a52ffcfc474
-
SHA1
0b084ffa469c99694a76d4ded03de63bcc72913b
-
SHA256
7a7c0ef1d93f5426c4ae3de56531b11a5add78adae5043dd2faaf9144296db6b
-
SHA512
1721cb557d16c4786142cae6c59471f4acd3e6d4439c2eb8b99352bcb4a1433cbb67aab297ed1b7a148058d917a7f596fe074ace3b46d0d48c1d920cdffbfe72
-
SSDEEP
12288:8LCzfkBR8UN6RkMA0G2ujSm709XrebZUDwhmie:8CDkJ6tAj2aSm709XKtUDw0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9d198e63f3d2e2f6bc279a52ffcfc474_JaffaCakes118
Files
-
9d198e63f3d2e2f6bc279a52ffcfc474_JaffaCakes118.exe windows:4 windows x86 arch:x86
b42303eba23fcb3572ec242db6731fbc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
CreateFileA
CloseHandle
ExitProcess
LCMapStringA
user32
CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
advapi32
RegOpenKeyA
RegSetValueA
RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
Sections
.text Size: 424KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ