Static task
static1
Behavioral task
behavioral1
Sample
f8b21074154ca47656c144367e538320_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8b21074154ca47656c144367e538320_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f8b21074154ca47656c144367e538320_JaffaCakes118
-
Size
797KB
-
MD5
f8b21074154ca47656c144367e538320
-
SHA1
150edc8fb5996e5af59c13599193a5e5882ba93a
-
SHA256
5d6530c3a221a0e2ee97b61c37bda78001458ad3c0af959791277244be5e1c0f
-
SHA512
0742c3523187c2b77044ae2ce9dae0e50dbbdfd22dfec29ec5e94aa1d1bf4d19f18d385c6168959aa960b32f7d23573af63b9f7eb95a4a5a1eea0e93699f9c8d
-
SSDEEP
12288:acG2E9l99bp385ooRzZoaMgN0GSK+gZpP6niAoLNIY0N2Ew8DuC6iOhmvWwGP:F69bpM++zZiK+hCRIY4hDtww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8b21074154ca47656c144367e538320_JaffaCakes118
Files
-
f8b21074154ca47656c144367e538320_JaffaCakes118.exe windows:5 windows x86 arch:x86
8a6ae5c628d276fe0eacb7aa138c20ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
urlmon
CoInternetCreateZoneManager
wininet
InternetGetConnectedState
shell32
ShellExecuteW
comdlg32
GetSaveFileNameW
winspool.drv
OpenPrinterW
crypt32
CertOpenSystemStoreW
wsock32
WSACleanup
shdocvw
DoOrganizeFavDlg
Sections
.text Size: 786KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE