Static task
static1
Behavioral task
behavioral1
Sample
571a1d25497af40f652a53b86c924a05_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
571a1d25497af40f652a53b86c924a05_JaffaCakes118
-
Size
920KB
-
MD5
571a1d25497af40f652a53b86c924a05
-
SHA1
133e48b9f8eb0be4ac96d494aa89404d2a78aad8
-
SHA256
7c019a75921938eca73d734e9a1273761610e78384a0ff1bb309240cc29b1a54
-
SHA512
5266106f93fc34bfbe2caff607dad3e101ee4c011983aec5aa2e3124593f7ee0299763c9ac3c4ddb9ac796402fea31e5a3f75f0d5f30dcca1625ef79698d64be
-
SSDEEP
24576:QdKl5cr8wGnc9+thDvGNh4qI9aqn9xGzfUxaExhR4tbo:Qc0Gyy+r4DAq98zfvENmo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 571a1d25497af40f652a53b86c924a05_JaffaCakes118
Files
-
571a1d25497af40f652a53b86c924a05_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f2d085ca6aff7a98ebad75b4b87e8f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
HeapDestroy
HeapAlloc
LCMapStringA
HeapCreate
ExitProcess
user32
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA
advapi32
RegEnumValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA
ole32
CoUninitialize
CoCreateInstance
CoGetClassObject
Sections
.text Size: 106KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 714KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 25KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 67KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE