Static task
static1
Behavioral task
behavioral1
Sample
edf92ad1d2a9be631affe2be72af7bb3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edf92ad1d2a9be631affe2be72af7bb3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
edf92ad1d2a9be631affe2be72af7bb3_JaffaCakes118
-
Size
30KB
-
MD5
edf92ad1d2a9be631affe2be72af7bb3
-
SHA1
5fbc697a3df397457ca55fc5a90e5e0691f90045
-
SHA256
62dd01bc1ce6c0554d325b98bada9b852c66b055b72e6c37baba0e37f6162d81
-
SHA512
8b59a75ca53d10b330da1cf0cd2299d97e8bb989997a0f1d496b9c768c7984c7272b153226b86996f357347debf2a5551cb01f17a41be969b153dbfbe81a21d1
-
SSDEEP
768:RoFFTnndqd27F1Ae774wwL/m9X2KH3cneEOYUFx7:mFNnnkdK37Hme9XBHYUFx7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edf92ad1d2a9be631affe2be72af7bb3_JaffaCakes118
Files
-
edf92ad1d2a9be631affe2be72af7bb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a106eceffcdd61870278bf2adb2595b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
wcscmp
user32
EnumWindows
shlwapi
SHGetValueA
wininet
InternetQueryOptionA
shell32
SHGetSpecialFolderPathA
advapi32
RegSetValueExA
ole32
CLSIDFromProgID
oleaut32
SafeArrayDestroy
msvcp60
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
Sections
.text Size: 26KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE