Static task
static1
Behavioral task
behavioral1
Sample
15e5540e748777fe519b8150433a0a23_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
15e5540e748777fe519b8150433a0a23_JaffaCakes118
-
Size
124KB
-
MD5
15e5540e748777fe519b8150433a0a23
-
SHA1
1430b6cc9cd291abddad77f7ddf2f7c845839294
-
SHA256
cd1536a15688c19fc6dc9cce75b5f90428706080473a88bd718e373616f28d20
-
SHA512
5a079b7b7d74b94fb1f8e30ff835e318b0e976b6045f3a1d04c95926b6f6fd36a542f71371389dae7d1d266802e64de8eb92d457d7cdd4182e1b5abfedc01988
-
SSDEEP
3072:u4KDEcrDoZsj9j1B8E0pygblHu2Xdc8KJJ26DFCKr:9+TrBD0pyg5u2XdL6J26hh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e5540e748777fe519b8150433a0a23_JaffaCakes118
Files
-
15e5540e748777fe519b8150433a0a23_JaffaCakes118.exe windows:4 windows x86 arch:x86
0944296102da409f0b7ebe811c5438d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DefineDosDeviceA
QueryDosDeviceA
GetLastError
CloseHandle
CreateFileA
Sleep
GetVersionExA
DeviceIoControl
SetLastError
GetCPInfo
GetModuleFileNameA
UnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
LoadLibraryA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
GlobalAddAtomA
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetProcAddress
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
RtlUnwind
WriteFile
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
wsprintfA
MessageBoxA
wvsprintfA
LoadStringA
advapi32
RegEnumValueA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE