Static task
static1
Behavioral task
behavioral1
Sample
37a524985760f3216ea8ce4293151a29_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
37a524985760f3216ea8ce4293151a29_JaffaCakes118
-
Size
793KB
-
MD5
37a524985760f3216ea8ce4293151a29
-
SHA1
44d304c6938c0d373cb564f98272de3bf0ac27aa
-
SHA256
b8e84f0bcf0db1cb67b8e60434897d2ba71ffd28489acd255d39c8679d384b8c
-
SHA512
77f6da7e74948f7c86e1fe071cfc1df3487c356cf555b5a0d1942c50dfc214c741ecf7200c3307266adf830648188a886fa6824e24fa3e3b6c26022a38c603e7
-
SSDEEP
12288:DNawBhEWvUTder01B+/jJ/6Eo9iSbuJc7pTz2BpQ0Foroq4pT7m2YDRiLe:Ba4Uhe+oVCEFSisTKkLro37mHDR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37a524985760f3216ea8ce4293151a29_JaffaCakes118
Files
-
37a524985760f3216ea8ce4293151a29_JaffaCakes118.exe windows:4 windows x86 arch:x86
7329cbbebbfcb28067015c11206abc70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetProcessHeap
Sleep
LoadLibraryA
CreateMutexA
CreateSemaphoreA
GetFileAttributesW
SetEvent
lstrlenA
GetStartupInfoA
GetLocalTime
GetTickCount
CreateHardLinkW
CreateDirectoryW
GlobalFree
SetLastError
WriteConsoleA
CloseHandle
SetLastError
VirtualProtectEx
HeapSize
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
w32topl
ToplEdgeInit
ToplEdgeCreate
ToplEdgeDestroy
ToplEdgeFree
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE