Static task
static1
Behavioral task
behavioral1
Sample
41a1d1cef3e10a44b1eb57ffbcabdfc1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
41a1d1cef3e10a44b1eb57ffbcabdfc1_JaffaCakes118
-
Size
115KB
-
MD5
41a1d1cef3e10a44b1eb57ffbcabdfc1
-
SHA1
a3b3091f6ae3cd36ac9340f2e806250b1e715751
-
SHA256
e5c21fcece8533c59a391d29f493f36f8e2ab24812c2b4b955ccb5a5b5e96e43
-
SHA512
a962b969c334362e0a2ec87ae9aa3afd84e3ee961ab3c7583a5f6be8f1bfbd249f17f29f5052c9964f02d97edd0aecea9e2089c33260ef10c8960ceba92e12e8
-
SSDEEP
768:1Bwmcq3qDhqeJo4zl20FkFrDcnKFyca5UBkuJslzxAIZ8IoQCU+j69Ci/bKQ2MCL:omJ3qMeSNl8yku2ljM0jeQ2MK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a1d1cef3e10a44b1eb57ffbcabdfc1_JaffaCakes118
Files
-
41a1d1cef3e10a44b1eb57ffbcabdfc1_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac44138c22d6a162adfab6f4c784739c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ReadFile
user32
CopyIcon
GetFocus
EndDialog
GetCursor
DrawIcon
GetWindowTextLengthA
LoadCursorA
AlignRects
advapi32
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegEnumValueW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueW
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyW
RegEnumKeyA
RegDeleteKeyW
RegCreateKeyExA
RegQueryInfoKeyA
RegCreateKeyA
RegQueryValueExW
RegCreateKeyA
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExA
RegLoadKeyA
RegGetKeySecurity
RegDeleteKeyW
RegCreateKeyA
RegCreateKeyA
RegQueryValueA
RegOpenKeyExW
RegCreateKeyExA
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyW
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExW
Sections
.gjhdc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iong Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jiic Size: 74KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.libco Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ejadg Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ