Static task
static1
Behavioral task
behavioral1
Sample
1bd55b802ab2bf597e7d3ca345e8a737_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bd55b802ab2bf597e7d3ca345e8a737_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bd55b802ab2bf597e7d3ca345e8a737_JaffaCakes118
-
Size
80KB
-
MD5
1bd55b802ab2bf597e7d3ca345e8a737
-
SHA1
c1df788488edfc6f8978c2d9114230090f57382f
-
SHA256
dced5119be51fc89e00f8ec9850c2d6b38edbd6b7093f028fc12014f327ab482
-
SHA512
c355bc2a4d7c1e96c85ac99153693677575ba35159cc66a1eee64beace211fbb589274147a4f2e29ddd606d6a9a4d13475ab85f4431c36d4ccc2dad5f36ed6d9
-
SSDEEP
1536:HQK+xgaTMrqRxkSM1Fewft0TRbHWiAQEBiyfCvASf6fWH8YGChP61L4m2goWsKR:HUuaTbvQ1FAlTWbBdCvJ6C3U41W/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bd55b802ab2bf597e7d3ca345e8a737_JaffaCakes118
Files
-
1bd55b802ab2bf597e7d3ca345e8a737_JaffaCakes118.exe windows:4 windows x86 arch:x86
41507753530d76bf751bd1509806ec8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
Sections
CODE Size: 71KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE