Static task
static1
Behavioral task
behavioral1
Sample
b52d344697af35a6b1b09055ede55d34_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b52d344697af35a6b1b09055ede55d34_JaffaCakes118
-
Size
175KB
-
MD5
b52d344697af35a6b1b09055ede55d34
-
SHA1
f3ba6ce5a837ca8662d8b62bb5cbf627c958388a
-
SHA256
c3a85fe71636f3bb2bb25177e4400644702f8d41183fe8f63778ee519530dd61
-
SHA512
6a9b41fa0967328454220a8917ed1d99eb43d14ebd75540e8f725bf94d9f589742bd50de30a8e0a3dd5fec00fdbad4b3cd1890654ddb3c22732c15e43722fac2
-
SSDEEP
3072:aR+3mSXsvirTVCtnGzZHt399U/CXFFk8jwaaHw7Koj4r4U3wuhTPtcdMv8EWDv52:aR+WGzCtnGNT9U/CXiwqGRGaGaGnZYG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b52d344697af35a6b1b09055ede55d34_JaffaCakes118
Files
-
b52d344697af35a6b1b09055ede55d34_JaffaCakes118.exe windows:65535 windows x86 arch:x86
420d0fc9c3c9a635ee4bc191ea7d4586
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA
advapi32
RegCreateKeyExA
RegFlushKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegConnectRegistryA
RegSetValueExA
RegEnumKeyExA
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE