Static task
static1
Behavioral task
behavioral1
Sample
022df5d7024ea6bb82352a55072d9d54_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
022df5d7024ea6bb82352a55072d9d54_JaffaCakes118
-
Size
3.5MB
-
MD5
022df5d7024ea6bb82352a55072d9d54
-
SHA1
deaeec6dba782495d2fcbda99e2cadb7f85ee8e5
-
SHA256
8bc956a903559ed5ab5d968ac9d9d0ba254e4e27fc83a168980799935b88da73
-
SHA512
6046eaf3e16f13e0a73f2caf1cee0c7618032bbd5ac9e94d5f84152cb541708f3ca44245fcba88db9f713ef5973a9c58fb94619ce316eb1ab032723a276ca2d3
-
SSDEEP
49152:dfdeUb9tXXSajNQ8Th0MisisCA+RXGJgPAc+IqixTOLPwUkwVyoDzcG/kaypo3Zp:dz99y8V023+cGYfrqUkwVyEk6JiDUqRC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022df5d7024ea6bb82352a55072d9d54_JaffaCakes118
Files
-
022df5d7024ea6bb82352a55072d9d54_JaffaCakes118.exe windows:5 windows x86 arch:x86
5d83f82a4f7247e3710c79dc905d74b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetReadFile
avicap32
capCreateCaptureWindowW
shfolder
SHGetFolderPathW
version
VerQueryValueA
rpcrt4
UuidCreate
imagehlp
MapFileAndCheckSumW
secur32
GetUserNameExW
gdi32
SetWinMetaFileBits
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
shell32
SHGetMalloc
comctl32
ImageList_GetIconSize
shlwapi
PathFindFileNameW
ole32
CreateFileMoniker
oleaut32
SysAllocStringLen
oledlg
OleUIBusyW
imm32
ImmGetContext
ws2_32
socket
winmm
timeGetTime
setupapi
SetupDiCreateDeviceInfoList
iphlpapi
GetAdaptersInfo
Sections
.text Size: 3.5MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE