Static task
static1
Behavioral task
behavioral1
Sample
0ae99170cc5e8af6c67925f221fedef9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ae99170cc5e8af6c67925f221fedef9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ae99170cc5e8af6c67925f221fedef9_JaffaCakes118
-
Size
1.7MB
-
MD5
0ae99170cc5e8af6c67925f221fedef9
-
SHA1
61a2476dfdcba6d3402e2d343b6f57b67fe35f81
-
SHA256
5fdd52c2eaa600fd84e4b41c5e74759e370220c71e657ccd47c73601251ff80e
-
SHA512
f42c4f078a7e8483a5a9b7ca0669b9ca94893a7ed44252523b1eb6726f2dec0c3406401f70fb21c79ab90353fd7399bb10d05b7123d6b79aa3cc6de4ee2ccdfb
-
SSDEEP
24576:ZAAjUVLQkf7SrOLqnALB2SLTGGRtQ5yfHHUQourAuwMRVK1ei01:Zx2LCGQAd2eTDbTH/oukFMnKl01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae99170cc5e8af6c67925f221fedef9_JaffaCakes118
Files
-
0ae99170cc5e8af6c67925f221fedef9_JaffaCakes118.exe windows:4 windows x86 arch:x86
4fa6d98c39ab0a804e8a1899f5d2578a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptGenRandom
qt-dx331
?imComposeEvent@QWidget@@MAEXPAVQIMEvent@@@Z
msvcp60
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
msvcrt
_controlfp
gdi32
CreateCompatibleBitmap
user32
ClientToScreen
ole32
CoInitialize
oleaut32
VariantClear
winmm
timeBeginPeriod
msvfw32
ICDecompress
dsound
ord1
msacm32
acmStreamClose
ddraw
DirectDrawCreate
libeay32
ord652
ssleay32
ord15
dpu11
dpuIsItTimeToUpdate
dpugui11
dpuUpdateStartGUI
dpv11
dpvDeallocateDPCProductVersionList
dpus11
dpusDeallocateImage
Sections
.text Size: 1.2MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 475KB - Virtual size: 475KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE