Static task
static1
Behavioral task
behavioral1
Sample
26b290e644511c03eeac421cd175967d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
26b290e644511c03eeac421cd175967d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
26b290e644511c03eeac421cd175967d_JaffaCakes118
-
Size
392KB
-
MD5
26b290e644511c03eeac421cd175967d
-
SHA1
dfe153482217b40133dd115beb2f42cde9b8c034
-
SHA256
a1ba3dfd06125dfebbd93e7a951af4da62072a9fe10aafe60ca21585ca9cca66
-
SHA512
d8fc7e1592e95ba63007b0292e7ec74bf7f59652cc22aa26da05f45cf96674fe87522da0fa9081f91a434179257c0eb98287801f9e23f6a13d62ee1d3f9c8d75
-
SSDEEP
6144:n6rlDdwQIINWnYWoqZxf7Lmk9JlBMHiDD5O5bnDvTVQuCMTvdGzJjXXEx4dPTfgN:KlDdjIIz9qZx/ly753yuFTkVjHE6BsA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26b290e644511c03eeac421cd175967d_JaffaCakes118
Files
-
26b290e644511c03eeac421cd175967d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9879549c8a820490b03b104ae9b7a459
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegQueryValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
Sections
.text Size: 20KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE