Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5609e0b9edf5b861e6fa9e94f2b23012.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_5609e0b9edf5b861e6fa9e94f2b23012
-
Size
135KB
-
MD5
5609e0b9edf5b861e6fa9e94f2b23012
-
SHA1
46dc1c70485080fc6b36905c52f4ea342ff7f33e
-
SHA256
e39ca1dc9d8b0bba6a919fbd0ebfa64393728f40a702293c4a5aa04022736fa4
-
SHA512
a15b5712f476f4029e163ba28c9c6d9b7d292ef63a41d7d938caa9f2b434cfc49be125f6e7290ac281b00e19b6b6d6387f0bf4eb992516674002f4329daaf7d4
-
SSDEEP
3072:aR+3mSXsvirTVCtnGzZHt399U/CXFFk8jwaaHw7Koj4r4U3/Qtg9D+:aR+WGzCtnGNT9U/CXi/SqD+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5609e0b9edf5b861e6fa9e94f2b23012
Files
-
JaffaCakes118_5609e0b9edf5b861e6fa9e94f2b23012.exe windows:65535 windows x86 arch:x86
420d0fc9c3c9a635ee4bc191ea7d4586
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA
advapi32
RegCreateKeyExA
RegFlushKey
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegConnectRegistryA
RegSetValueExA
RegEnumKeyExA
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE