Static task
static1
Behavioral task
behavioral1
Sample
bc83197c2992aea3626c7852f4e5b161_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bc83197c2992aea3626c7852f4e5b161_JaffaCakes118
-
Size
447KB
-
MD5
bc83197c2992aea3626c7852f4e5b161
-
SHA1
68d9f5de234571efbabefd0ff5e970fa3f12c242
-
SHA256
09d8dab18c14cba38ac36ed267af1e8f58f3f0b6d2d5d622028dab68c72d6aa5
-
SHA512
10a7000237cedd9330cff5c89e812af1c59ccbb7bcaa07e18ac69ea2c4d7069ba57b6e23b8febcbf26576490895ef08cfd97876e44d77bd7dcaeed52d73f4caf
-
SSDEEP
6144:8wsEwsj2WEVIldtQKVKWmHlKVf7ND3zVhR+xOl6xYJXzZPtCI/K:8wisjaelKmzNL3gIwY1zZFZ/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource bc83197c2992aea3626c7852f4e5b161_JaffaCakes118
Files
-
bc83197c2992aea3626c7852f4e5b161_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE