Static task
static1
Behavioral task
behavioral1
Sample
159be31f8673f6375a1c472f021ae6de_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
159be31f8673f6375a1c472f021ae6de_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
159be31f8673f6375a1c472f021ae6de_JaffaCakes118
-
Size
880KB
-
MD5
159be31f8673f6375a1c472f021ae6de
-
SHA1
a5de78e7ef3b96ccf1954e12c23f663192bf7b08
-
SHA256
7caa9b12ebbb74bb279acda1d940092847a29185e7a0f32850cbc45270db35f9
-
SHA512
2640abbee0505b79d43944d5759e022cf47cc76d2752301ec6b78ad97afb7224f7d9007da7102d499b51c5e609792baa68271659d878fe999b98b42594d0f726
-
SSDEEP
24576:mXNbkJ4gJUnqCog5s64Po6CNSYRhc7I+Fy6pVcE:/QqCogT2mTyI+FZg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159be31f8673f6375a1c472f021ae6de_JaffaCakes118
Files
-
159be31f8673f6375a1c472f021ae6de_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc2541c43d13b9d20b839f9b6d7c5b07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
OpenClipboard
gdi32
SetStretchBltMode
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recv
comdlg32
GetFileTitleA
Sections
.text Size: 716KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE