Static task
static1
Behavioral task
behavioral1
Sample
f04a9c426407ef8d5c61e833ab3ee568_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f04a9c426407ef8d5c61e833ab3ee568_JaffaCakes118
-
Size
136KB
-
MD5
f04a9c426407ef8d5c61e833ab3ee568
-
SHA1
6bb71e274da7871ab765f933e2abb3b52d6462bd
-
SHA256
01137a00f4532af4dd2f0d411504053c7cf93996cbdb5c07f85df61005c6e70c
-
SHA512
950e4cf943290d02b3a6238ecde82ef5277e9a1a18c60a11cc683504cf5a3fdff4902b876711364fca40754057d80b029ececa645ea7339fe04505df65cc06eb
-
SSDEEP
1536:wOVjIolHZMoRe29kztCuNZTaH2EQaK4O0lMHhLUMgAze1VNDKc9:baWHZMoReZxCuNZTu27aPOEioM2V1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f04a9c426407ef8d5c61e833ab3ee568_JaffaCakes118
Files
-
f04a9c426407ef8d5c61e833ab3ee568_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e7daf0c5c45cac1d68d7abe24170c2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetExitCodeProcess
CreateProcessA
SetLastError
HeapFree
lstrcpyA
GetLastError
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
GetSystemDirectoryA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindNextFileA
lstrcmpA
RemoveDirectoryA
OutputDebugStringA
FindFirstFileA
HeapAlloc
WideCharToMultiByte
GetModuleHandleA
HeapCreate
HeapDestroy
CloseHandle
FlushFileBuffers
RtlUnwind
RaiseException
FindClose
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
SetStdHandle
VirtualFree
WriteFile
MultiByteToWideChar
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
ReadFile
LCMapStringA
LCMapStringW
user32
wsprintfA
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegQueryValueA
RegSetValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
shell32
SHChangeNotify
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE