Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_24f14847e1e9b7a4dcbd77816d3ea8a4.exe
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_24f14847e1e9b7a4dcbd77816d3ea8a4
-
Size
58KB
-
MD5
24f14847e1e9b7a4dcbd77816d3ea8a4
-
SHA1
a172b22bd35f2aa8e7b9788a075ab2e3da87b2a4
-
SHA256
98c494dd67af59ab86bf136d1af3e5351155bac8901b4ed0953afde478aa5cd1
-
SHA512
ab76c729209ba44d9618131fb65ebb7daed8123a0625c34832039f8364fb2d56a89780fda7f7fe4ca06a7b95afb0f7c389453ea410ef846a6e1b762b316ac127
-
SSDEEP
1536:Uu3W/ExRPxMTNfEuyUYZwGouoYOHJpQivnZOD/c:Uu3uExNOiVSu9OpHm/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_24f14847e1e9b7a4dcbd77816d3ea8a4
Files
-
JaffaCakes118_24f14847e1e9b7a4dcbd77816d3ea8a4.exe windows:4 windows x86 arch:x86
021741cd68b5f963e1e2a32c2beb4b21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetCurrentThread
LoadLibraryA
LocalAlloc
GetFileType
LocalFree
CompareStringA
GetVersionExA
CloseHandle
GetVersion
GetModuleHandleA
GetProcAddress
user32
EndPaint
CharNextA
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
BeginPaint
GetMessageA
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ