Static task
static1
Behavioral task
behavioral1
Sample
ecb351b29009ffe84405fef2563ad906_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecb351b29009ffe84405fef2563ad906_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecb351b29009ffe84405fef2563ad906_JaffaCakes118
-
Size
9KB
-
MD5
ecb351b29009ffe84405fef2563ad906
-
SHA1
fac259a8a120ba77498d49467ba8a0ab6a933fe9
-
SHA256
cc1234e02a5e9e51932b601298181aa94fba4961babf5f1a0f8637e2ec24c997
-
SHA512
c5850fb4645573c2700437dc991ede89a62d4cc52e6a43aadbe2d1c58ab26a6710f3ab7a74d9330b78ac432c73bd4ac3aff532d4c77d29e81b600ce63797836c
-
SSDEEP
192:LcHRwvKT2FvP+WNS1B40wvQDHzYFseJWNZ07uJg0C+kiMPpzRh:2nfuezC1JWIZ+kbpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecb351b29009ffe84405fef2563ad906_JaffaCakes118
Files
-
ecb351b29009ffe84405fef2563ad906_JaffaCakes118.exe windows:4 windows x86 arch:x86
224311aa6b21d66209b7612d4eb83ae0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
memset
shlwapi
SHGetValueA
wininet
InternetCrackUrlA
user32
wvsprintfA
ole32
CoInitialize
oleaut32
SysFreeString
Sections
.text Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE