Static task
static1
Behavioral task
behavioral1
Sample
0dd79e364364aa64381242942fecbda3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0dd79e364364aa64381242942fecbda3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0dd79e364364aa64381242942fecbda3_JaffaCakes118
-
Size
398KB
-
MD5
0dd79e364364aa64381242942fecbda3
-
SHA1
32ea31863c0966ef09f8ae460306e5cf6c34db7c
-
SHA256
b67018512894d3b3422f0f856756229ace8e18044e0db51a4141b078bc96cb1d
-
SHA512
71c0c70816e38001bea26e3dabb881bf6ff22ce4e87a2150247d40bfb0c5d950c30e348a9411e3acacd6797a33d0973d2c6320e1473cbd28eb9661bdd4875ae7
-
SSDEEP
6144:CPPrO426Ep+NQFj8YdCioiqBb1lo/GWyJusttUnVzfCN/WQ3EEs8Pl9Bnsz+d4:0r5FSfdZTUREGFpt0fw/WQ3EEs83mzw4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd79e364364aa64381242942fecbda3_JaffaCakes118
Files
-
0dd79e364364aa64381242942fecbda3_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ba47a23d75efe23bcab7d23280a7f70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gdiplus
GdipImageGetFrameDimensionsList
user32
DefWindowProcW
gdi32
BitBlt
ole32
OleLoadFromStream
oleaut32
VarBstrFromDate
comctl32
ImageList_Add
rpcrt4
UuidCreateSequential
iphlpapi
GetAdaptersInfo
Sections
.text Size: 352KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE