Static task
static1
Behavioral task
behavioral1
Sample
f019c2b9c2b6a64d57cd4a5b052e35a9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f019c2b9c2b6a64d57cd4a5b052e35a9_JaffaCakes118
-
Size
166KB
-
MD5
f019c2b9c2b6a64d57cd4a5b052e35a9
-
SHA1
35ecca319710a28d470286432cabb391816642c0
-
SHA256
bdbe75670b11c01aef51a04f979a60fd545e4ee07ccc6efc11e085a1dd131866
-
SHA512
749653102095d8b530ce9c524d5d4dcc5744eb51df04685ff3b544a54386c37c028f520054efa726222f9f1468f7251272773ddddfa9ce5cf8d523c6b330c2e3
-
SSDEEP
3072:vufEwW90LLrjzeNaDaW1S2XyabQNPxPHtHTk8cRB:2sF0eJW1rNbuFA8oB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f019c2b9c2b6a64d57cd4a5b052e35a9_JaffaCakes118
Files
-
f019c2b9c2b6a64d57cd4a5b052e35a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b5ecebbdbe9a76f441a2b4166d1b731
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
CoCreateInstance
CoInitializeSecurity
CoQueryProxyBlanket
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoSetProxyBlanket
StringFromGUID2
rpcrt4
UuidCreate
kernel32
SetEndOfFile
HeapSize
DeleteCriticalSection
GetCalendarInfoW
IsValidCodePage
ReadFile
ExitProcess
VirtualAlloc
GetACP
GetStartupInfoA
GetCPInfo
EnumResourceNamesA
SetFilePointer
HeapReAlloc
FreeEnvironmentStringsA
RaiseException
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
RtlUnwind
VirtualFree
GetOEMCP
HeapCreate
InitializeCriticalSection
SetEnvironmentVariableA
user32
CreateWindowExW
DestroyWindow
SendMessageA
IsWindow
GetDlgItem
EnumChildWindows
GetWindowThreadProcessId
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ