Static task
static1
Behavioral task
behavioral1
Sample
f726dbbfd0b5ba2a472dc365ad163916_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f726dbbfd0b5ba2a472dc365ad163916_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f726dbbfd0b5ba2a472dc365ad163916_JaffaCakes118
-
Size
76KB
-
MD5
f726dbbfd0b5ba2a472dc365ad163916
-
SHA1
1db8853db3c789ef79cad4da39a0658f77dad888
-
SHA256
14f5c56e77aa7c554ff3ad4e0fb93b9cbead2525dbda6420ff6ea42e0d7c9b0a
-
SHA512
68c3f1ec5f24916bdd9cdbaa1e35a5d445d71a3aeff7bb7d227b47b57e97ca6105fae10eda1bfce6626e5130e9d3ad4be2e97df9d0bd1b613ea0890069eec996
-
SSDEEP
1536:FX+AUCuAJpYUeoYc7gwKtdLK0tE3poG33zKW4Djlk:t+AfgoYcMwmdrmZoG3j+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f726dbbfd0b5ba2a472dc365ad163916_JaffaCakes118
Files
-
f726dbbfd0b5ba2a472dc365ad163916_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6374bb0b37a7db8c8be7f258c76c831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_itow
iswcntrl
isxdigit
advapi32
LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose
wininet
InternetDialW
InternetGetCookieW
ShowCertificate
InternetSetCookieW
UrlZonesDetach
user32
GetForegroundWindow
GetMenuStringW
GetScrollPos
LoadKeyboardLayoutW
SetDoubleClickTime
SendInput
Sections
.text Size: 47KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE