Static task
static1
Behavioral task
behavioral1
Sample
082f18fdd4ac460ec030e7678ae8e438_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
082f18fdd4ac460ec030e7678ae8e438_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
082f18fdd4ac460ec030e7678ae8e438_JaffaCakes118
-
Size
1.3MB
-
MD5
082f18fdd4ac460ec030e7678ae8e438
-
SHA1
d9be0d256847e4c829ea4e8b38af4da658b99510
-
SHA256
972d9570edca6b23a33c2ae9f0e4e1e7416ead41e7a5840841a2f0a15e3fbeef
-
SHA512
06c4aa7e89fc87789512cc3d8b58e823f20aede8f2b02a665527e8a3e835e04bad4f84d3014520c5b62c17378f385c352757e42e8d72caefd4d5eaa48a5f7e0b
-
SSDEEP
24576:+2nDcZsot1D1Cmv7gDdOzlZZyRgMlbIIjwuCZB3Wk8HpB:+2nDaLD1Cmv7gDdGZ8NXwtHEH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082f18fdd4ac460ec030e7678ae8e438_JaffaCakes118
Files
-
082f18fdd4ac460ec030e7678ae8e438_JaffaCakes118.exe windows:4 windows x86 arch:x86
d763060a6da95035bb4aefce43f0ae33
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
wsock32
WSACleanup
Sections
CODE Size: 1.3MB - Virtual size: 26.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE