Static task
static1
Behavioral task
behavioral1
Sample
d3d13fb7fc151b1aa41141f9a406a253_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d3d13fb7fc151b1aa41141f9a406a253_JaffaCakes118
-
Size
240KB
-
MD5
d3d13fb7fc151b1aa41141f9a406a253
-
SHA1
851000ca248aef7ae219bd6c515b1be39d7d0abb
-
SHA256
151129e4e4b1bc03cedc36199bc23547621832fb50272827f1ecbade657d09e0
-
SHA512
4f49e52a661bf675bfb6b63afa0bf2bb8ad5678819271f841cfc0e92d9b28be8770de376fd1bb5992bd7411f1c3b1d55859fefbfe06554f191b076a0015893cb
-
SSDEEP
3072:S6WHZMoRDPxqLdDNfz0J0sMJ9vfl+uyh8Ns57PxVnIRF+XfOR7M5mvIMIXhT3Njc:Sddxqd5YJAfyuKVnIR8XGY0vlIXBdUD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d13fb7fc151b1aa41141f9a406a253_JaffaCakes118
Files
-
d3d13fb7fc151b1aa41141f9a406a253_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e7daf0c5c45cac1d68d7abe24170c2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetExitCodeProcess
CreateProcessA
SetLastError
HeapFree
lstrcpyA
GetLastError
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
GetSystemDirectoryA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindNextFileA
lstrcmpA
RemoveDirectoryA
OutputDebugStringA
FindFirstFileA
HeapAlloc
WideCharToMultiByte
GetModuleHandleA
HeapCreate
HeapDestroy
CloseHandle
FlushFileBuffers
RtlUnwind
RaiseException
FindClose
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
SetStdHandle
VirtualFree
WriteFile
MultiByteToWideChar
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
ReadFile
LCMapStringA
LCMapStringW
user32
wsprintfA
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegQueryValueA
RegSetValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
shell32
SHChangeNotify
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE