Static task
static1
Behavioral task
behavioral1
Sample
3aebfec081e99fd39f63c1260f44cd38_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3aebfec081e99fd39f63c1260f44cd38_JaffaCakes118
-
Size
148KB
-
MD5
3aebfec081e99fd39f63c1260f44cd38
-
SHA1
72caa14a10138289d8eab1d7e1fdc03d4dad54b5
-
SHA256
c01f7f737cb6a218f9de5b3fe6c41df2f86bc671fb42facdce21709688ea0145
-
SHA512
63f64c01bc67e6e04fd7c2cc1c49cae5296a3364049bb145a5205dc71deeb14885348e6bed82a5139bf858ec4c11d3243c678dede6926ea73e82914bf7ddb2b7
-
SSDEEP
768:v8ATV/MFMDEEx1PAy4jyn5jAI8dbFbshQRbYFKvcwhnbrEJOwOU/Huz8aE:vfl6MoEvw+nFARAhmsidhbrEJ/OzO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aebfec081e99fd39f63c1260f44cd38_JaffaCakes118
Files
-
3aebfec081e99fd39f63c1260f44cd38_JaffaCakes118.exe windows:5 windows x86 arch:x86
c98744260deb4d821fa5df16d93c8df4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueExW
RegGetKeySecurity
RegLoadKeyA
user32
DrawTextW
DialogBoxParamA
GetMenu
Sections
.anhpl Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kbjj Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hbpap Size: 76KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aoimp Size: 512B - Virtual size: 361B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kgpp Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ