Static task
static1
Behavioral task
behavioral1
Sample
01c68e0c0cb355a74df3abeba6581dc7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01c68e0c0cb355a74df3abeba6581dc7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
01c68e0c0cb355a74df3abeba6581dc7_JaffaCakes118
-
Size
964KB
-
MD5
01c68e0c0cb355a74df3abeba6581dc7
-
SHA1
00006e242e1224fc4214d87a8681e0bfb133d6f7
-
SHA256
765627c2e0aa1f27336fa38af20b4e6640b03b715ae14287e928cabec6a40cc6
-
SHA512
885d0f9619954da3bd1a688d74a897952af407a41a0bfa9eda242d28208dc9dda8a3c348c351d10dcea7c77422bcab207381ed0d636b4a3eb14471dc176eec32
-
SSDEEP
24576:TRCY8O3nFmfs5e4n6HXrkRiL7pOeuFUdttN+dB1MIdEz:xB3nQk44ncIr8mv1M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01c68e0c0cb355a74df3abeba6581dc7_JaffaCakes118
Files
-
01c68e0c0cb355a74df3abeba6581dc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
8aec9619e0b969223ac8c52984a34d6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
imm32
ImmSetCompositionWindow
winspool.drv
OpenPrinterA
shell32
ShellExecuteExA
comdlg32
ChooseFontA
iscmplr
ISDllGetVersion
winmm
timeGetTime
shfolder
SHGetFolderPathA
msimg32
GradientFill
oledlg
OleUIObjectPropertiesA
Sections
CODE Size: 919KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE