Static task
static1
Behavioral task
behavioral1
Sample
2afb09c82bb5955c0a23824c6265ff22_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2afb09c82bb5955c0a23824c6265ff22_JaffaCakes118
-
Size
148KB
-
MD5
2afb09c82bb5955c0a23824c6265ff22
-
SHA1
358e3db91916f6e05c841d51c6551c4b450a9142
-
SHA256
e233d7d81b64f15ea97f83a331361917ad026a70ed93dc0f5161ac4eb3428737
-
SHA512
bc5a13da61a89a843458f6801f19cb26b701bbf267858bd55314c84992150f61061e4d1260bac8d4d8736fa2d8efa2cadb4561aadbc13bc4924f833322e57024
-
SSDEEP
1536:6v5/6P7xDrwowHLrf2UukuHuopGC56h81YqbeRJIfhDZlhl7Tpa5OodmrhNv8j:eqDrwo4f2Uqimhllr7TpFoArb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2afb09c82bb5955c0a23824c6265ff22_JaffaCakes118
Files
-
2afb09c82bb5955c0a23824c6265ff22_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f34c4349da091cfa469d45cceaa5b7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
LockResource
LoadResource
FindResourceA
ReadFile
SetFilePointer
SizeofResource
GetSystemDirectoryA
GetModuleFileNameA
LCMapStringW
LCMapStringA
GetStringTypeW
DeleteFileA
CreateFileA
WriteFile
CloseHandle
GetFileSize
GetLocalTime
GetStringTypeA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
HeapFree
HeapAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ