Static task
static1
Behavioral task
behavioral1
Sample
383ecbc94fec3b654d14d1d181ed2dd7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
383ecbc94fec3b654d14d1d181ed2dd7_JaffaCakes118
-
Size
189KB
-
MD5
383ecbc94fec3b654d14d1d181ed2dd7
-
SHA1
8057523ccef2838553fdb1506e4d25e92310d3a6
-
SHA256
402f27c55fda97ffbd5f836bcf1a1e81d475ae9505fd1da5f341ead9621ee5b3
-
SHA512
028a02b9fb7ad5463fc1817c633839bd2dd097851363331db90565951b8da5b978d15dc9562abc59bb6b6f80b80199a1775c8a84c13960d1853c0f598f2d45ef
-
SSDEEP
3072:ru7QFyr34NW5CaS7Oagp4KsHZDXIzETnFNwPUVFvruzG73OF6zW3/:aQFyEWAaCtgp4KsBnTLwPUVFDuKSFe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383ecbc94fec3b654d14d1d181ed2dd7_JaffaCakes118
Files
-
383ecbc94fec3b654d14d1d181ed2dd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ed393224667e74784336bef9b5a54fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalLock
GetLocaleInfoW
TlsAlloc
FindAtomA
GlobalFree
lstrcmpW
SetLastError
InterlockedExchange
GetOEMCP
CreateFileW
TlsGetValue
lstrlenW
InitializeCriticalSection
InterlockedDecrement
GetCurrentThreadId
FlushInstructionCache
lstrlenA
LocalAlloc
TlsSetValue
HeapSetInformation
GetComputerNameW
LeaveCriticalSection
DeleteCriticalSection
EnumResourceNamesA
MultiByteToWideChar
RaiseException
GlobalUnlock
InterlockedIncrement
EnterCriticalSection
GlobalHandle
GetStringTypeA
FormatMessageW
SetLastError
GlobalAlloc
SetUnhandledExceptionFilter
MulDiv
GetCurrentProcess
GetTickCount
WaitForSingleObject
CloseHandle
TlsFree
WideCharToMultiByte
shlwapi
StrRetToStrA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW
rpcrt4
RpcStringFreeA
Sections
.text Size: 101KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ