Static task
static1
Behavioral task
behavioral1
Sample
1518a9c46ba6e006b1e8f9005af3296c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1518a9c46ba6e006b1e8f9005af3296c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1518a9c46ba6e006b1e8f9005af3296c_JaffaCakes118
-
Size
252KB
-
MD5
1518a9c46ba6e006b1e8f9005af3296c
-
SHA1
57768b6646cd1f3e71af53a6c02435da70f3f269
-
SHA256
3486de3d0dcf767ce1e2a7425815cb7022c81f8c4f14a2adf570df7addc3176c
-
SHA512
30ef998e9ea2c577a5322a6c84811a6a16b987d440f294cf45296ee0432cda94dbc4b186be3d85a92add874007465a11f9aa6218e74f5d8fc7ef74a7f6fbc516
-
SSDEEP
6144:ttHCeJvEdAgc3IKKXDXvrN7NGioEcrtBDiRks+:HiekAgc3IKMDXvRxGscmp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1518a9c46ba6e006b1e8f9005af3296c_JaffaCakes118
Files
-
1518a9c46ba6e006b1e8f9005af3296c_JaffaCakes118.exe windows:4 windows x86 arch:x86
de6fdcdc7f4ad649a7529bf91b3c3b02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
ws2_32
WSCInstallProvider
Sections
CODE Size: 246KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE