Static task
static1
Behavioral task
behavioral1
Sample
f22e44ce0a211e269675e7f83a1671ac_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f22e44ce0a211e269675e7f83a1671ac_JaffaCakes118
-
Size
172KB
-
MD5
f22e44ce0a211e269675e7f83a1671ac
-
SHA1
4aa196c923cb820c5e7c9a73a45ca7051c8995f5
-
SHA256
b4e7d61c7bc8d1de5cef00631f590944604df0a35c1da3c9387f6ed13ba831a5
-
SHA512
4bd2180ee5a98effd5fb643f7bb16cbf7d8d919fb32fb3c350d01ab1e664534f3c24dfaaaf1d2ed7a88d3114c2aaf2f4862157faca9744c3010ed24dbffd3271
-
SSDEEP
3072:jIs0loJfuALqzYjZ6HXg6TdwXy9ngQXcqNhbJVuHE/y/COPfaRYv0qQxA/9T0:7UoNgYjKgmdyigQXHhdoH2yZPftv0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f22e44ce0a211e269675e7f83a1671ac_JaffaCakes118
Files
-
f22e44ce0a211e269675e7f83a1671ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
64c23e750d66316e07716ca7f142ad3a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
CoTaskMemAlloc
CoUninitialize
CoInitialize
StringFromGUID2
CoTaskMemFree
gdiplus
GdipGetImageWidth
GdipDisposeImage
kernel32
GetNumberFormatA
lstrcpynW
GetStringTypeW
GetVersion
IsDBCSLeadByte
MultiByteToWideChar
GetCalendarInfoW
FindResourceA
DeleteFileW
ExpandEnvironmentStringsA
QueryPerformanceCounter
DeleteFileA
WaitForSingleObject
GetLocaleInfoA
ExitProcess
HeapSize
HeapCreate
SetHandleCount
GetCurrentProcessId
GetModuleFileNameA
SystemTimeToFileTime
WideCharToMultiByte
EnumResourceNamesA
GetTempPathA
GetTickCount
HeapDestroy
GetFullPathNameW
InitializeCriticalSection
GetCurrentProcess
CompareStringA
GetVersionExA
CreateDirectoryA
lstrcpynA
GetStartupInfoA
GetStringTypeA
Sleep
GetCPInfo
GetFullPathNameA
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ