Static task
static1
General
-
Target
JaffaCakes118_b5fe91ce6e8f17254364cf732f684851
-
Size
117KB
-
MD5
b5fe91ce6e8f17254364cf732f684851
-
SHA1
f79f80bef4ae363df69ad6c85ba7cb2bbd902d92
-
SHA256
abd02679cdc6e0185480b764f1cac1b16f7337b662f0e0523f3a56e96c8b7b99
-
SHA512
1f446e0083a34fc82ee36f74d73f01f5281ec42f635cc1ab54b2c42b78ea53c3d86f260ced5e84fc9305fcb95edeb7afe6bca544f5d620b08955f6c7468fb591
-
SSDEEP
3072:5Tg2vIufer7yfdn7pPqjwaaHw7Koj4rtkqMv:5kynWr7qd71fw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b5fe91ce6e8f17254364cf732f684851
Files
-
JaffaCakes118_b5fe91ce6e8f17254364cf732f684851.exe windows:65535 windows x86 arch:x86
f29615ff4ca9a28bd85a78f36060f1dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA
SleepEx
msvcrt
__p__commode
_except_handler3
__p__fmode
__setusermatherr
_initterm
_adjust_fdiv
__set_app_type
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr1 Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE