Static task
static1
Behavioral task
behavioral1
Sample
dd0669584e16ad6fa0a4862ec9704a25_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd0669584e16ad6fa0a4862ec9704a25_JaffaCakes118
-
Size
400KB
-
MD5
dd0669584e16ad6fa0a4862ec9704a25
-
SHA1
6934a4db48abdd29adcecb8cf6c3d259ae730f59
-
SHA256
b3fed52d44b5b6662a9eb587506eef6c062b17fc56ae99253c9e2769a2105ce2
-
SHA512
a40ff5960dbbefb67981a1eb422a38e6d1ea58dad915f7a93fdce066dd0394017d33ecf7d57882a4bd85d948c935545dd0edbb86b2d8884651f1f9da673e18d7
-
SSDEEP
12288:pLK/FBM2iiGFbzcLiip5V9UDRE2Os7uY53dgj9:orM2itSv5VYssuY53SB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd0669584e16ad6fa0a4862ec9704a25_JaffaCakes118
Files
-
dd0669584e16ad6fa0a4862ec9704a25_JaffaCakes118.exe windows:4 windows x86 arch:x86
95d9137b2a12f1f3c7a735ec57c87f08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
GetCurrentProcess
CreateFileA
ExitProcess
user32
CreateWindowExA
SetWindowLongA
wsprintfA
CloseWindow
CharLowerBuffA
advapi32
RegEnumValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegDeleteValueA
Sections
.text Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ