Static task
static1
Behavioral task
behavioral1
Sample
b026b367f777bf8165c34dc9d9602497_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b026b367f777bf8165c34dc9d9602497_JaffaCakes118
-
Size
680KB
-
MD5
b026b367f777bf8165c34dc9d9602497
-
SHA1
ba7581c92089a14ea6e0b83a1aa2cb25176cf71e
-
SHA256
f44f5f550c4e35cd42b70c9616e5310e46d32604b138d639696871440372587e
-
SHA512
888591d85c168087ed056118cccdc75319b06caf8e1dfeac6e4d27fa8e9c05049e0ccb2e3b1401bedc370e2a0cf3c3ed31ecb572153ae754752030d2964524bf
-
SSDEEP
12288:jBxecGjzmUsQamBp401Iwjacy/Znlwg8sxKruz5PPFIIhIIF:FxTG2UsDmBW0awG/P4sEiz5Pl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b026b367f777bf8165c34dc9d9602497_JaffaCakes118
Files
-
b026b367f777bf8165c34dc9d9602497_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5942e1d3164c066677186b453304bcd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA
user32
wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
advapi32
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
Sections
.text Size: 562KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ