Static task
static1
Behavioral task
behavioral1
Sample
08dc19d543d4325abb11d7b53360537d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08dc19d543d4325abb11d7b53360537d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08dc19d543d4325abb11d7b53360537d_JaffaCakes118
-
Size
581KB
-
MD5
08dc19d543d4325abb11d7b53360537d
-
SHA1
2bccf67d493911e63a67b6361a1fef4a4a06f5d0
-
SHA256
b527864f7ed1eeaf0ccb072227e1ae8e44761cc53357d38bb09877639aaba2d5
-
SHA512
98a94923a16678bdbacf6ef1d8792ac55588d5ee79248fe0d8ed5d1f0f6808864031eca574010517a2b0b6ffcb1afe26b2f4a7b6f1e5465e36ef1d968c71422c
-
SSDEEP
12288:0QRnmHsFwe01MOfO1MiPqx01geuXDp9+8NpUs6E5ghIiDW:JRnmHsKeSM7Rqx018XN9DKyght
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08dc19d543d4325abb11d7b53360537d_JaffaCakes118
Files
-
08dc19d543d4325abb11d7b53360537d_JaffaCakes118.exe windows:4 windows x86 arch:x86
e4a001eabda4a316c76fa3d99ed1234d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
shell32
SHGetFileInfoA
wininet
InternetSetOptionA
urlmon
CoInternetCreateZoneManager
comdlg32
GetOpenFileNameA
netapi32
Netbios
shlwapi
SHAutoComplete
winmm
PlaySoundA
Sections
CODE Size: 545KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE