Static task
static1
Behavioral task
behavioral1
Sample
ac1f83f74b96165f29d41587e3b70ede_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ac1f83f74b96165f29d41587e3b70ede_JaffaCakes118
-
Size
15KB
-
MD5
ac1f83f74b96165f29d41587e3b70ede
-
SHA1
20af7d9a88357f3dc407363476f385aea5f6790a
-
SHA256
1851f6b0c02909365d13cd1dfaedf9bf5d79ee5a3428d1df1d91627231d1d663
-
SHA512
45f1ff166a72f47f946b986f9278cae7c3fbf854717009b84718b850749050708b8ab69066e321f660ad10cf596ae6b1570eb3c33c9d19f01869dd61a37dea2e
-
SSDEEP
384:B3xSWlrXJadrIuqaJDzhDb3q8kp5+nTHhYVamFPR:flXUhIun1b3q8kv+TBReJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac1f83f74b96165f29d41587e3b70ede_JaffaCakes118
Files
-
ac1f83f74b96165f29d41587e3b70ede_JaffaCakes118.exe windows:4 windows x86 arch:x86
75010b1ffc06cf3b58c2fd084c99cad8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
Sleep
GetFileSize
GlobalAlloc
CloseHandle
ReadFile
GetWindowsDirectoryA
GlobalFree
WriteFile
GetEnvironmentVariableA
SetFileAttributesA
MoveFileA
GetLastError
GetStartupInfoA
GetModuleHandleA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ