z1e.bmai298RsBS2
Static task
static1
Behavioral task
behavioral1
Sample
06f587bf5ac03046e837cc6c48c3a935_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
06f587bf5ac03046e837cc6c48c3a935_JaffaCakes118
-
Size
148KB
-
MD5
06f587bf5ac03046e837cc6c48c3a935
-
SHA1
090ed38369f8cabf63e3554597178a379ce9210d
-
SHA256
4fd8fb566e841aaffd322c8bb1bec93ad19b898939f7999a8b4159067a828337
-
SHA512
47d2da2e7568e20578672de7b5459c32c9fa8c5c60b68d7a96feae829e0b1149b7c12efbca4d9712376c1b63a83e021a2f7dab26d29da134368f6b8dc33fbb39
-
SSDEEP
1536:7n37qGoHKqdFKIfjEGG3edtFWimVzw+FiyeJbiHf4/SxensrTCyzZNcY5Go3:7nWqjAjEGG3enFkuhnO/qcDHCyzZNf3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f587bf5ac03046e837cc6c48c3a935_JaffaCakes118
Files
-
06f587bf5ac03046e837cc6c48c3a935_JaffaCakes118.exe windows:5 windows x86 arch:x86
b94d61f7b28611a714f0161e37e0ba8e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
malloc
fwprintf
gdi32
CreateRoundRectRgn
CancelDC
CloseEnhMetaFile
GetTextMetricsW
kernel32
LoadLibraryW
GetTickCount
GetCommTimeouts
GetVolumeInformationA
GetPrivateProfileIntA
GetUILanguageInfo
GetApplicationRestartSettings
TzSpecificLocalTimeToSystemTime
GlobalAlloc
OpenFileById
HeapWalk
SetCriticalSectionSpinCount
GetSystemTime
GetThreadPriority
GetNumberOfConsoleMouseButtons
AllocConsole
FindFirstFileNameTransactedW
GetCommandLineA
advapi32
GetTokenInformation
RegEnableReflectionKey
ole32
GetClassFile
user32
DestroyCaret
DialogBoxParamW
DefWindowProcW
GetCursorInfo
DrawIcon
GetWindowDC
IsClipboardFormatAvailable
IsZoomed
GetMenuCheckMarkDimensions
IsDlgButtonChecked
secur32
EnumerateSecurityPackagesW
oleaut32
GetErrorInfo
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt2 Size: 4KB - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ