Static task
static1
Behavioral task
behavioral1
Sample
e26019d19a82f314d8884e92f77ad74d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e26019d19a82f314d8884e92f77ad74d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e26019d19a82f314d8884e92f77ad74d_JaffaCakes118
-
Size
81KB
-
MD5
e26019d19a82f314d8884e92f77ad74d
-
SHA1
6fe970b850944f827a39cf9cc4842c893689d473
-
SHA256
9a51ab984162f011a5374bad9aa5edc55c0864eec893ee91f3b880612e77c2f0
-
SHA512
80fdf830b023f2f2a016f34fe3ff1330defdea8fdd221a60c78f2c526ea2306408771863390bdc1073fea782919a57a3bb771390026060921f294d5667a3884b
-
SSDEEP
1536:04gl4cYbsknq9XVscuo+sXti5pK+KMRZOLeAOk0e2+uR2C1eb/wT:0L4cQhnqME+sXtV2RC0nxwCgboT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e26019d19a82f314d8884e92f77ad74d_JaffaCakes118
Files
-
e26019d19a82f314d8884e92f77ad74d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1126b982f6fb59bd59dfec0d9bc312b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
InstallFlash
GetClassURL
IsJITInProgress
CreateAsyncBindCtx
CoInternetGetSession
GetClassURL
comdlg32
LoadAlterBitmap
WantArrows
CommDlgExtendedError
ChooseColorW
GetOpenFileNameW
user32
IsChild
GetWindow
LoadMenuW
MapDialogRect
ModifyMenuW
IsZoomed
Sections
.text Size: 48KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE