Static task
static1
Behavioral task
behavioral1
Sample
244adc6b0d5f25fb1598e9f7b4738deb_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
244adc6b0d5f25fb1598e9f7b4738deb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
244adc6b0d5f25fb1598e9f7b4738deb_JaffaCakes118
-
Size
305KB
-
MD5
244adc6b0d5f25fb1598e9f7b4738deb
-
SHA1
c5484e30e9957a7e76994a4d96ec9a8ad8ed280b
-
SHA256
7add042c5b2fa34b60e4d071e2b89c75b3e61b1e2569111524671de462516a78
-
SHA512
861c74e52a32e40c6b7fc387f34178bc8e67ce07fe818fd883da4b38908c0ebcef74bb4dfcd521cbf8a30726d7b63eed9633d90eac82bb7319130c97019ccb6f
-
SSDEEP
6144:xPdnoQH4+hPG/X/lX08806873qtAwYPto9Hy+ppfWj05N0T7txbOrOU2Ax05y:l5oW4KOf/lX0vtAqS+fWm0TPbIOfQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 244adc6b0d5f25fb1598e9f7b4738deb_JaffaCakes118
Files
-
244adc6b0d5f25fb1598e9f7b4738deb_JaffaCakes118.exe windows:4 windows x86 arch:x86
25e73542d6b2b04cfb0933bff8535254
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
winmm
mciSendCommandA
wsock32
WSACleanup
Sections
CODE Size: 295KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE