Static task
static1
Behavioral task
behavioral1
Sample
d0c6a6d284fd9b7fcbe126b545473141_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0c6a6d284fd9b7fcbe126b545473141_JaffaCakes118
-
Size
195KB
-
MD5
d0c6a6d284fd9b7fcbe126b545473141
-
SHA1
94d25532f9f16d4cd7658f81923aacf6e326b8ae
-
SHA256
413fa57dae5d86a3db2cac0a3979d8005ef2e1feb4c5628419e69c1080af57aa
-
SHA512
f8fa6becc983285346990100a3ff2f396eba18087475e4e9e33917bc1057778c6326bc58efd9bf9e9ab03c6f971d5f0a64992e6a9d9fdece219c798a94307301
-
SSDEEP
6144:qCxd1LEsZ/U+Hvp93i0n9IAXMaHz6zPutiyVzJdyzLw:qJspPpJFnTMaTLtiyK8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0c6a6d284fd9b7fcbe126b545473141_JaffaCakes118
Files
-
d0c6a6d284fd9b7fcbe126b545473141_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e2dd29b98c46762c88ef6a9a9aff7c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoMarshalHresult
CoInitializeEx
StringFromGUID2
CoTaskMemFree
CoInitialize
CoFreeUnusedLibraries
StringFromCLSID
CreateStreamOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
GetRunningObjectTable
CreateItemMoniker
CLSIDFromString
CoUninitialize
CoTaskMemAlloc
gdiplus
GdipGetImageWidth
GdipDisposeImage
kernel32
CreateDirectoryA
GetExitCodeThread
GetTempPathW
CloseHandle
MultiByteToWideChar
SetPriorityClass
LocalFree
DeleteFileW
GetFileAttributesW
WideCharToMultiByte
SetFileAttributesW
GetTempFileNameW
SetCurrentDirectoryW
GetVersionExA
FindFirstFileW
GetModuleFileNameW
GetCurrentDirectoryW
DeleteFileA
InterlockedDecrement
EnumResourceTypesW
lstrcmpA
CopyFileA
GetModuleFileNameA
ReadFile
FindNextFileA
GetFileSize
WaitForSingleObject
GetPrivateProfileStringW
InterlockedIncrement
LocalAlloc
FindNextFileW
GetLastError
SetFileAttributesA
CreateFileA
DisableThreadLibraryCalls
SetErrorMode
lstrlenA
GetFileAttributesA
FreeLibrary
FindClose
GetTempPathA
GetTempFileNameA
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ