Static task
static1
General
-
Target
JaffaCakes118_b38ae660236b5d465ebaf2f70bd06298
-
Size
502KB
-
MD5
b38ae660236b5d465ebaf2f70bd06298
-
SHA1
df932e166a6248715c03d3a816e4ee6c23e7e367
-
SHA256
c9672652705d30b9f99e574dedeb346853bf844b1b5a2fe2b7aea9f0c2930a69
-
SHA512
52a8a3f3cf5f1359f803f3f2d2647c93c34419e9a8246df8cbbbd1f9456144144317e24f9d6cbf4b79f8adc953c051497c7a75988aa3b3befa6200280f2dd5f0
-
SSDEEP
6144:KiAelbcNezv5ZjlCJ6uyqF1mDDKanJmrEAetyK2dIdYlCoq+ZZAwUHJBLU5hrijg:fAcb225lCJ6Pqm2d+YlPewcJBLUXPbPj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b38ae660236b5d465ebaf2f70bd06298
Files
-
JaffaCakes118_b38ae660236b5d465ebaf2f70bd06298.exe windows:4 windows x86 arch:x86
55eeb2f92a81fcbdaa2952419c5fceb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetCurrentThread
FatalAppExitA
GetVersionExA
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetLastError
ReadFile
WriteFile
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
SetThreadPriority
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
SetStdHandle
CreateFileA
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
user32
MessageBoxA
wsprintfA
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_DATA1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE