Static task
static1
Behavioral task
behavioral1
Sample
163f1110b5e03c0064bb3da2f3f6c66c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
163f1110b5e03c0064bb3da2f3f6c66c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
163f1110b5e03c0064bb3da2f3f6c66c_JaffaCakes118
-
Size
177KB
-
MD5
163f1110b5e03c0064bb3da2f3f6c66c
-
SHA1
f01723672229dcdf3313a04a781497b20505fc7e
-
SHA256
e294ef98baa26c6481bb06ed85b057c330b8eeea42d822a201f587ad2c10ad95
-
SHA512
bfaf5be212ed97c9cb305274d6d4ae6b2a32e4a2123cfaa23a8c7d999988a72476b9f37ca3bc12571cabe0cac0295a3c29aba8de3a9e8871a36077f65f4d69e4
-
SSDEEP
3072:62WGV+1SAsFa9Z9ZUEGZa6F3h96Zn116FTG9AN1n1L0WkXR8P/ydH+tjC:rWe+kN4zLUEGdF34n1YtaeVl0WZP/ysW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163f1110b5e03c0064bb3da2f3f6c66c_JaffaCakes118
Files
-
163f1110b5e03c0064bb3da2f3f6c66c_JaffaCakes118.exe windows:4 windows x86 arch:x86
045241176a04d45cc5fb97c0f4bf6bcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoUninitialize
comctl32
_TrackMouseEvent
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 164KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE