Static task
static1
Behavioral task
behavioral1
Sample
a6aceafaffeaceb9eafc8c3349d00a90_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
a6aceafaffeaceb9eafc8c3349d00a90_JaffaCakes118
-
Size
288KB
-
MD5
a6aceafaffeaceb9eafc8c3349d00a90
-
SHA1
3270d039ebf2ee5f7ed0da3d4821b255a4682b00
-
SHA256
69e40c179d08bc3702e977affd3cad6c2fd7c2f295e3ef487ce4958d3f1ada27
-
SHA512
3e729b575638f558e0b9be70fbbc44556ca1b9707446c4dd0179e1987b03e10a75e52e1accdb80f3b974af5e94f5b2e5b63531450838b0139b94b5a179ebbc57
-
SSDEEP
6144:HfcV6p+EUfK2H70JazuPj6VrQqN8bO581acJW6:HsRlR4wzWmV0q6O0X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6aceafaffeaceb9eafc8c3349d00a90_JaffaCakes118
Files
-
a6aceafaffeaceb9eafc8c3349d00a90_JaffaCakes118.exe windows:4 windows x86 arch:x86
e0a030a6b47e0132de9b89c637144bc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
GetAcceptLanguagesW
PathRemoveFileSpecW
UrlUnescapeW
PathAppendW
PathIsRelativeW
PathCreateFromUrlW
PathFindExtensionW
StrCmpIW
UrlCreateFromPathW
PathCombineW
kernel32
WritePrivateProfileStringW
LoadLibraryW
GlobalFindAtomW
SetFileAttributesW
WaitForSingleObject
LoadLibraryExA
GetSystemDirectoryW
GetCurrentDirectoryW
GetProcAddress
CreateMutexW
GetSystemInfo
ExpandEnvironmentStringsW
FindClose
FindNextFileW
EnumResourceLanguagesA
lstrcmpiW
GetCurrentProcessId
GetModuleHandleA
HeapFree
lstrlenA
GetProcessHeap
FindFirstFileW
GetPrivateProfileStringW
LocalFree
GetConsoleCursorMode
GetWindowsDirectoryA
CopyFileW
ReleaseMutex
GetModuleHandleW
GetPrivateProfileIntW
LoadLibraryExW
FreeLibrary
HeapAlloc
GetCurrentProcess
rpcrt4
UuidCreate
Sections
.text Size: 148KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ