Static task
static1
Behavioral task
behavioral1
Sample
b5b63b7518f122f81bb415dabd9552de_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
b5b63b7518f122f81bb415dabd9552de_JaffaCakes118
-
Size
188KB
-
MD5
b5b63b7518f122f81bb415dabd9552de
-
SHA1
ab07d3e8ca171afe76e9ecc9d8e687734a0b4aef
-
SHA256
f46b7e66a7e7a2b620e882409b14e8db7f0de6c27d1817882870910f36607de3
-
SHA512
5adc8a1249cfec81920373b658b9f56342a6b1b4e15d3cbfbfb39d28171a965e310f74a0004b6978a29a449fa9cb82182381155af3eee026574fad136920f23d
-
SSDEEP
3072:pzcstJkf63+/JEHHM8WwWkx7ZVlmRqH4rQ4UunQikOklYP95ljqUF4Wm4r:pTJkf63+/Nkx7wRqYrQcvkOce5ljQWHr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5b63b7518f122f81bb415dabd9552de_JaffaCakes118
Files
-
b5b63b7518f122f81bb415dabd9552de_JaffaCakes118.exe windows:5 windows x86 arch:x86
bb764f9f45e58eb1047498fd99b0d82d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CascadeWindows
shell32
ShellExecuteA
oleaut32
VarUI4FromUI2
advapi32
SystemFunction036
Sections
.text Size: 67KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE