Static task
static1
Behavioral task
behavioral1
Sample
0308c15ffed1b7c5d3ea65a48751f9b7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0308c15ffed1b7c5d3ea65a48751f9b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0308c15ffed1b7c5d3ea65a48751f9b7_JaffaCakes118
-
Size
73KB
-
MD5
0308c15ffed1b7c5d3ea65a48751f9b7
-
SHA1
142a0db3926c63f2238adb3a0773bb521d2f08ea
-
SHA256
60191f501456bca83c2f45d3478b47c7db1caad0281b4657b219fdf65c9c7ddf
-
SHA512
ed3f46f76920001f34aede6225e30a9bff69b5aecc891a9daed15b612c55e076f7837eadb48d87bd6c96ef419a63200434e86b39c62a6998122f914b18197817
-
SSDEEP
1536:Poy1TZz8mHwE6Xe0YGD2sTYCgPhjBo8JW4No:P31TZzXse0YGCywjB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0308c15ffed1b7c5d3ea65a48751f9b7_JaffaCakes118
Files
-
0308c15ffed1b7c5d3ea65a48751f9b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa373078034ef680822904970420c063
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput
msvcrt
acos
iswcntrl
isxdigit
advapi32
LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose
wininet
InternetDialW
InternetGetCookieW
ShowCertificate
InternetSetCookieW
UrlZonesDetach
Sections
.text Size: 48KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE