Static task
static1
Behavioral task
behavioral1
Sample
d2e4fb3d4e42e26fd46b0583a3a57d7c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d2e4fb3d4e42e26fd46b0583a3a57d7c_JaffaCakes118
-
Size
120KB
-
MD5
d2e4fb3d4e42e26fd46b0583a3a57d7c
-
SHA1
114914dc0abad5767413074c26acde0e720e34b0
-
SHA256
ca62f3c97dd430c119d299ed96b9ed4ecf51193695e224762dd17f8379b0fcca
-
SHA512
73f7df4514d49ca377cb6391c31fc41dc9f59238fdd132b65d6723b1b6feac3ee096bda2ce7a4c9ab15d93b997a564cc3aac9b1cbf65541b36353ade30cbdff0
-
SSDEEP
1536:XeYx63W7rlk+qt/4cXxH3ApBAgEugv1UMVHFj23z2vnXne+z:Xe86elkhXABAnugRHUxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2e4fb3d4e42e26fd46b0583a3a57d7c_JaffaCakes118
Files
-
d2e4fb3d4e42e26fd46b0583a3a57d7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
81a61fc9642eac407750275e8374ca78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetEnvironmentVariableA
GetModuleHandleA
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetVersionExA
GetStartupInfoA
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
user32
MessageBoxA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE