Static task
static1
Behavioral task
behavioral1
Sample
ff077fb7a3411abdfc789d4f31d7f78a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ff077fb7a3411abdfc789d4f31d7f78a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff077fb7a3411abdfc789d4f31d7f78a_JaffaCakes118
-
Size
171KB
-
MD5
ff077fb7a3411abdfc789d4f31d7f78a
-
SHA1
5277533eac75a1faf0aee629d503677cb0bf5c43
-
SHA256
8d0ae5498987df62ff128ba2c4bf1085e654d6e1ad6b42fcca97f63af003bc5e
-
SHA512
9f90948dbc8a1bfd1ea902829b378eefe32fbb05827d9b03c913f7764c4888518a0a71863dbfb1cfa4abbd6a0c3af057bd9e9dbb3ffa87ae92840eb74c70d690
-
SSDEEP
3072:tbWdfgET6RzbRa9F7FDf6YbEqaVwwnhBDCf9maAprvln/d3aoDeMaJ6K+0rzn06i:pWd7QHmh+YbEqaVwwPe1mprd/laoDTak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff077fb7a3411abdfc789d4f31d7f78a_JaffaCakes118
Files
-
ff077fb7a3411abdfc789d4f31d7f78a_JaffaCakes118.exe windows:5 windows x86 arch:x86
b29d9179ca8a45f909f9b498a358705a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
msimg32
AlphaBlend
gdi32
SetTextColor
version
VerQueryValueW
wininet
InternetReadFile
comdlg32
GetSaveFileNameW
crypt32
CryptBinaryToStringW
ntdll
NtShutdownSystem
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
comctl32
InitCommonControls
Sections
.text Size: 160KB - Virtual size: 836KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ