Static task
static1
Behavioral task
behavioral1
Sample
6cb4ceb6b74b75683ed7752eaf1af3d0_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6cb4ceb6b74b75683ed7752eaf1af3d0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6cb4ceb6b74b75683ed7752eaf1af3d0_JaffaCakes118
-
Size
855KB
-
MD5
6cb4ceb6b74b75683ed7752eaf1af3d0
-
SHA1
430f9b7b187bd192660bbec92d38dd3bb46732af
-
SHA256
599d0b18ddcbaf07688c5ddf6102c5ea8fbf652c0b48f08b3222f587532555d0
-
SHA512
6b7899fbbe0d06d383ff4036bccc649806699a0d1cb13b664f7fe9919ad5d9c0c006c21fa58f88d5442562094b8693751dcbf63c48728646297da619e894f067
-
SSDEEP
12288:EKxUz9AdgeAQQIVHhnBhxluyKawjFWqq+KEsr1CzE+qdYx1H:EKxf+efxDKaqWqq+W5WfqdYx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cb4ceb6b74b75683ed7752eaf1af3d0_JaffaCakes118
Files
-
6cb4ceb6b74b75683ed7752eaf1af3d0_JaffaCakes118.exe windows:5 windows x86 arch:x86
784528df928673a9dd76b1bee6ad4aab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
CharNextW
gdi32
UnrealizeObject
version
VerQueryValueW
netapi32
NetWkstaGetInfo
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
msvcrt
memset
shell32
ShellExecuteW
winspool.drv
OpenPrinterW
Sections
.text Size: 747KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE