Static task
static1
Behavioral task
behavioral1
Sample
37629181173d61c13ecaa53bcd6e30e0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
37629181173d61c13ecaa53bcd6e30e0_JaffaCakes118
-
Size
113KB
-
MD5
37629181173d61c13ecaa53bcd6e30e0
-
SHA1
c27565d661476287647bfbcbaa9df41fa21c31c7
-
SHA256
b8908917e885e7fe739564fcb2a3e92b10a38492262cd7382f7fa003b1919185
-
SHA512
66c0b4416867106bc8eb776987f4cc643e35eeb948fbb1ab7aefdb56b3e4a97f7c28e76d45a07901022d8fb9b045f0e8aabcf2e0b31d9691f8921945d22a9872
-
SSDEEP
1536:pLJ0qVnKGrmOWb9mF2jbxWGq6emF2jbxWGq6nokG:NvVKomOS9S2jbxWGqrS2jbxWGq0okG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37629181173d61c13ecaa53bcd6e30e0_JaffaCakes118
Files
-
37629181173d61c13ecaa53bcd6e30e0_JaffaCakes118.exe windows:5 windows x86 arch:x86
48dc8e4841755543f1afc9383dd9570d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GetCommandLineW
QueryPerformanceCounter
ReleaseMutex
SetErrorMode
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpynA
lstrlenA
lstrlenW
CreateFileW
VirtualAllocEx
FreeLibrary
ExitProcess
CreateMutexA
LoadLibraryA
CloseHandle
user32
MessageBoxA
LoadIconA
SendMessageTimeoutA
SetForegroundWindow
LoadIconW
GetWindowThreadProcessId
LoadStringA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
shlwapi
PathRemoveFileSpecA
StrStrIA
StrCmpIW
SHSetValueA
SHGetValueA
msvcrt
memcpy
_vsnprintf
Sections
.textR8 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textR7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textR6 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ