Static task
static1
Behavioral task
behavioral1
Sample
1002-1651a6b1862ce277916e5c1a08a774748ec4ae6e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1002-1651a6b1862ce277916e5c1a08a774748ec4ae6e.exe
Resource
win10v2004-20240802-en
General
-
Target
f6ca53bb088dd746848471c17e6cf968_JaffaCakes118
-
Size
184KB
-
MD5
f6ca53bb088dd746848471c17e6cf968
-
SHA1
f7d2077114828ab890ff039c0a4f9a2389435e51
-
SHA256
25726c746ca31b4e00c94487d64f3c70e26947ab8ef8cccac61d08aa995287f3
-
SHA512
9570f4bfc6253c6a30ee0519a58f0a51523bce4914c8944b745ef8aa9c81e33c4743cd293312a84a4015fbf376153167446dc56dc4b9b1a0a99bb6dc8c66e5b3
-
SSDEEP
3072:SFWtoOLBbO5/MJT2UWZ5DUH8d++/jMRlU/Ro12EY/Hko4y3m0LKVxM:SAoOLBbe/sAWHIvrj/RI2EYP3m0L4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1002-1651a6b1862ce277916e5c1a08a774748ec4ae6e
Files
-
f6ca53bb088dd746848471c17e6cf968_JaffaCakes118.gz
-
1002-1651a6b1862ce277916e5c1a08a774748ec4ae6e.exe windows:4 windows x86 arch:x86
98ae64ceb31c84d051c68e52c347faa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetTimer
kernel32
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
RegOpenKeyA
ole32
CLSIDFromString
ws2_32
WSACleanup
shlwapi
PathFileExistsA
dnsapi
DnsQuery_A
shell32
SHGetSpecialFolderPathA
msvcrt
memmove
oleaut32
SysAllocString
Sections
.text Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE