Static task
static1
Behavioral task
behavioral1
Sample
cd66a1b279eeb47b83ea7fbe113793e7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
cd66a1b279eeb47b83ea7fbe113793e7_JaffaCakes118
-
Size
892KB
-
MD5
cd66a1b279eeb47b83ea7fbe113793e7
-
SHA1
7ab96a6e763341623ff0d988c6a012fb36f3286e
-
SHA256
13489744a0d0d9aa4f5c745bff26f674391dbafbde6de3a0312bdba6315a2eab
-
SHA512
136aa25c238663e659e6d8fa1b6ffae60cbcf9aecfd7a803f97300f57fa9a84c2c209ab5514e37f8ed3343d81599aebcede9cf94f5eae479b918c67f9de6a47d
-
SSDEEP
12288:J3pnePTR58jyu02PBoKexjbLBNxFDogPXNuCnLLdFPQszAaC8eTXZSSXy2nxru:dpn+R5814bLBNx1RluCLLD2VnCOu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cd66a1b279eeb47b83ea7fbe113793e7_JaffaCakes118
Files
-
cd66a1b279eeb47b83ea7fbe113793e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
499637b545e1091afcff0b595d2271b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
CloseHandle
CreateFileA
LoadLibraryA
ExitProcess
user32
SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA
advapi32
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
Sections
.text Size: 694KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ