Static task
static1
Behavioral task
behavioral1
Sample
dc98c146b2ce242d6c566836035a68c2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc98c146b2ce242d6c566836035a68c2_JaffaCakes118
-
Size
384KB
-
MD5
dc98c146b2ce242d6c566836035a68c2
-
SHA1
db890e8438456a2b42823e90db861d5d3582fbed
-
SHA256
1e0a204720fca6c501c87a674c44415f4882a4ffc505d0c91dcb79275c74cf98
-
SHA512
416455ec04bd19c9c6711e208419c27f5dfd7a68a264a0bd4ef8333e1b335ca59d4d10f59c4d1d9149af9d729b7e4361fe9afef4f60e74ade918b2e22a1fc6ad
-
SSDEEP
6144:xpljRc1Ryrc/dMrcxrzb7Eku2MbRUK6yhBKUIri81P9y8I3/Vp:9jRc8c/AkiSK6y61riePZ8r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc98c146b2ce242d6c566836035a68c2_JaffaCakes118
Files
-
dc98c146b2ce242d6c566836035a68c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
624fb7f887e88914caaa56629159f8ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA
GetCurrentProcess
ExitProcess
user32
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
advapi32
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegQueryValueA
RegDeleteValueA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
Sections
.text Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ