Static task
static1
Behavioral task
behavioral1
Sample
f6444e469478023a106e271416492875_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6444e469478023a106e271416492875_JaffaCakes118
-
Size
351KB
-
MD5
f6444e469478023a106e271416492875
-
SHA1
0b1b927240c64cfcc33a269f6c48416a51de7dcc
-
SHA256
ac127a5d36034ce79ec68c677415a575eba0eff150db40a8dbc814d160df952a
-
SHA512
71b1651543fc380d2e292d2980831a9fd641bd33920a8a98726377a273977a4aef0ba0a80a7e4e9838966ba7ac8fe6453f53deb1b895bcfa5c7e2db30d0e0ffe
-
SSDEEP
6144:igXUwvcgKxfirHG3tDBXDM5Y9Qd6Ud9oqk/fPQ8Prjj:TkwvcaK3o5Y9Qkq+/X/r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6444e469478023a106e271416492875_JaffaCakes118
Files
-
f6444e469478023a106e271416492875_JaffaCakes118.exe windows:4 windows x86 arch:x86
9149a8353533e2dfdd478d58d11c8bc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextA
gdi32
SaveDC
version
VerQueryValueA
wsock32
send
shell32
ShellExecuteA
ole32
IsEqualGUID
urlmon
URLDownloadToFileA
comctl32
ImageList_Add
wininet
FtpPutFileA
winmm
waveInOpen
rasapi32
RasEnumEntriesA
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
netapi32
Netbios
avicap32
capGetDriverDescriptionA
shfolder
SHGetFolderPathA
gdiplus
GdipFree
ws2_32
WSAIoctl
msacm32
acmStreamSize
pstorec
PStoreCreateInstance
url
InetIsOffline
Sections
.MPRESS1 Size: 244KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE