Static task
static1
Behavioral task
behavioral1
Sample
27beecf2efc747ed16a156748055bf64_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
27beecf2efc747ed16a156748055bf64_JaffaCakes118
-
Size
72KB
-
MD5
27beecf2efc747ed16a156748055bf64
-
SHA1
3257536861b0a6d388b6aa1472b24f5f0557774d
-
SHA256
b5cf8cf9fc3fb7ff99e9e8fff11cdce7ab6d8eae8c027de161db494f75982bfe
-
SHA512
6cfb09df1684b437b4f0cef0ff91d9b3429ec04c4daa8ef352803cd1d18856112717acabb7db811b93f41785387bee57fc05be139fc2d4d9e8b6bf9bf1e7b338
-
SSDEEP
1536:u+nA4KoI5J6gyr2DieSgMGWCt31IvmHuoeIH:u+A41EJ6gyr2WTGP1Io
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27beecf2efc747ed16a156748055bf64_JaffaCakes118
Files
-
27beecf2efc747ed16a156748055bf64_JaffaCakes118.exe windows:4 windows x86 arch:x86
23f2cb49538bd7535b12c4ad40acbffd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantInit
VariantClear
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
LCMapStringA
GetCPInfo
VirtualAlloc
ReadFile
SetEndOfFile
CreateFileA
CloseHandle
GetModuleFileNameA
WideCharToMultiByte
GetSystemDirectoryA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
GetEnvironmentStrings
GetACP
GetOEMCP
MultiByteToWideChar
SetHandleCount
LCMapStringW
HeapFree
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapCreate
GetEnvironmentStringsW
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeA
RtlUnwind
SetFilePointer
GetStringTypeW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugfvhpi Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE