Static task
static1
Behavioral task
behavioral1
Sample
0cf067992e099bd62ced338f7487ed02_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cf067992e099bd62ced338f7487ed02_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cf067992e099bd62ced338f7487ed02_JaffaCakes118
-
Size
178KB
-
MD5
0cf067992e099bd62ced338f7487ed02
-
SHA1
841bc372d4afffb15b4486a623c2bbdd84086f1f
-
SHA256
c78c0b5e6588bc07019c99411199483920386340dc8ba7976caba37c724aeca0
-
SHA512
bcc3b03d67d05939c6388c54ca7774d431a770352182412348b4b96c7512768b646affc0a69cc7186a8d2f076a38e58d0dd488a3f366ad55595b4a256ff1b758
-
SSDEEP
3072:OxQ1A59chgrlJK07KGyvf4SpEZCRRPlQk7voDODSXuQqMzeR9ExXQ+3:OiI9cGK026xCeOlMePyQY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf067992e099bd62ced338f7487ed02_JaffaCakes118
Files
-
0cf067992e099bd62ced338f7487ed02_JaffaCakes118.exe windows:1 windows x86 arch:x86
f435416ac2be5b960403ef9075780b63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
UnrealizeObject
ole32
CoUninitialize
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
winmm
PlaySoundA
Sections
CODE Size: 135KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE