Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3ce7fd60114ab054c2dc4baa55c9521f.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_3ce7fd60114ab054c2dc4baa55c9521f
-
Size
254KB
-
MD5
3ce7fd60114ab054c2dc4baa55c9521f
-
SHA1
63bdfc8830f699d346f49ae3f7312282e9c5c72e
-
SHA256
4d0a879aabca407fa4b1fd919ede54f382a2d5695418b16910b14a29aba6edf4
-
SHA512
abfbaad5dcbf0fcadfb21247d04f2935368af594e58f7759493fc6d3c16c5c3df9c2e87dfcb31031112285d81161e847c10f0b4eb93058c8094bd86001e5a1f8
-
SSDEEP
6144:gg/mmLxBqkNwy3f9oBnMtRsIpYjcjrzYUmGzZZ7fH:gg/mkDFNwy3fSURNpmGrz0UZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3ce7fd60114ab054c2dc4baa55c9521f
Files
-
JaffaCakes118_3ce7fd60114ab054c2dc4baa55c9521f.exe windows:4 windows x86 arch:x86
22423eb3058af0ae47f08ce450d03f43
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
Sections
.MPRESS1 Size: 249KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE