Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_771d3de2277229584c4474ecc7678720.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_771d3de2277229584c4474ecc7678720
-
Size
237KB
-
MD5
771d3de2277229584c4474ecc7678720
-
SHA1
1857d52fd9a054a650e5d137ac65941591d3d0bb
-
SHA256
87262e3bfc150b9ffca13f2fc5db91b7ba114db688a901fcf70740ca38daf12f
-
SHA512
150325c5115f0beb0633c6386ee630675a36ca674ea46dec613329e621acefd0f24d9b811f4b3c5da92ebaf3ad32c83a5ef86505a631cf2b3cfa5af8ba4eba20
-
SSDEEP
6144:vWtKIPvEZobZtE2Qq0GhbfKMbwo+/tDVXs:uPvECbZulq0cbXJ+/tts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_771d3de2277229584c4474ecc7678720
Files
-
JaffaCakes118_771d3de2277229584c4474ecc7678720.exe windows:4 windows x86 arch:x86
2ab023877e2f63b8673e0d2e900163a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetLastError
SetConsoleCtrlHandler
ExitProcess
TerminateProcess
GetCurrentProcess
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
UnhandledExceptionFilter
WriteFile
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
ReadFile
SetStdHandle
GetProcAddress
LoadLibraryA
CloseHandle
HeapReAlloc
GetFileInformationByHandle
PeekNamedPipe
DeleteFileA
CreateFileA
GetDriveTypeA
SetFileAttributesA
GetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetEndOfFile
GetFullPathNameA
GetCurrentDirectoryA
GetSystemTime
GetLocalTime
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE