Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6aa36426480531a8c3acac4765b25f03.exe
Resource
win7-20250207-en
General
-
Target
JaffaCakes118_6aa36426480531a8c3acac4765b25f03
-
Size
404KB
-
MD5
6aa36426480531a8c3acac4765b25f03
-
SHA1
676ef00554c824ae262471cbbe11ae2c159b505c
-
SHA256
39fcd34654de4fd0723de2335b1373f394bfe2ee0b2407196227abf37d740c72
-
SHA512
de8fd822825edc678da8a9b1becfce55120b68bef7f865fd28e9b93dfeca01c3c183feed2414cd1653b493982b9952e8923b88af9caca1e3d8ce208c222f25d2
-
SSDEEP
6144:pdfJxSR/B8AIvUb2dqXQlL7oAI9qlzYIVOE8RPIty1EAJJbE+Qr6EwZELdy:pdiZ8W2A0cAUIVkRP2AJJwLGEw6U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6aa36426480531a8c3acac4765b25f03
Files
-
JaffaCakes118_6aa36426480531a8c3acac4765b25f03.exe windows:4 windows x86 arch:x86
0361d348cc388ffa725fc0ea1e0872f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
ExitProcess
user32
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
Sections
.text Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ