Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_232e2cf46a9aa90786ecad7a1a160bac.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_232e2cf46a9aa90786ecad7a1a160bac
-
Size
216KB
-
MD5
232e2cf46a9aa90786ecad7a1a160bac
-
SHA1
0353e3de4430892005cd57c670d63137ca7feb2e
-
SHA256
ee506fffa49d02ac5c0abeeda4c47baecacb14f2da5daae59adc35a384b2e1e0
-
SHA512
9595ac9a1d0463dbce164f0f3bf2c8b988214d40c358dcea15cebe05ad12a5178dd061d09f5bf9095c900e3b576581769dfb212e9385870247de2151b0a59146
-
SSDEEP
6144:aOksXgnmBnMmjfvurcSKY0K0efL5cD3Is5P07:aOk74MmCHOej5cD3Is5Ps
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_232e2cf46a9aa90786ecad7a1a160bac
Files
-
JaffaCakes118_232e2cf46a9aa90786ecad7a1a160bac.exe windows:4 windows x86 arch:x86
18e020beeb1eb9779e27a0067c8121be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.MPRESS1 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: - Virtual size: 953B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE