Static task
static1
Behavioral task
behavioral1
Sample
0977f1474b567981e915274195aa2f9a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0977f1474b567981e915274195aa2f9a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0977f1474b567981e915274195aa2f9a_JaffaCakes118
-
Size
481KB
-
MD5
0977f1474b567981e915274195aa2f9a
-
SHA1
b32e22f4a951b0202f0eca6e23f419788b55b812
-
SHA256
5f3a02952ea36b4369ca0bca4c30397421893c5096efeef97fa451264f4b9b07
-
SHA512
1c852a801bb5162bebe41f98ada42461ac9e591366feea5d7d8a1caeb8a98ba5d3d5587d7495b5a2a7a8675a6060ab926c84cbf8cd180c8780d0c418e80b3087
-
SSDEEP
12288:BX9e1hZ1P8hW+1KzXIKcwW/TySf5GTzyO3ygxYEBMoRPB:doZRf+1ArcwW/WSfWyOieYEPRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0977f1474b567981e915274195aa2f9a_JaffaCakes118
Files
-
0977f1474b567981e915274195aa2f9a_JaffaCakes118.exe windows:5 windows x86 arch:x86
000f7583ce3c85e7d1f6486a087ea1b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
shfolder
SHGetFolderPathW
ole32
OleUninitialize
comctl32
InitializeFlatSB
winspool.drv
OpenPrinterW
shell32
ShellExecuteW
Sections
.text Size: 381KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE