Static task
static1
Behavioral task
behavioral1
Sample
270c9711aeca6b92e5bf180c9f67508f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
270c9711aeca6b92e5bf180c9f67508f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
270c9711aeca6b92e5bf180c9f67508f_JaffaCakes118
-
Size
181KB
-
MD5
270c9711aeca6b92e5bf180c9f67508f
-
SHA1
b8ea2e1b2d4c0b18b7c4e2d0c069a3a534e89fb8
-
SHA256
1c7ba1df4ec7779fac4c516de9637180fbec8e7b422bdb736d528f1d6d75642d
-
SHA512
e3a41e1e4652f976f01ce83bc2d0a661f9081b5f0f0d0ef9cd97cc91fde3cc9b14b35f8d2810c5cd9ae67151191d9778b3e0e72be1ae6f8d88c3ddf707fe07c7
-
SSDEEP
3072:LW5dzrIZbhKCOCIEgZnRYnqzTJD0KuFJ3qpFMd6DQ+s6eLX1ofF2jDdGSxD+3ap8:i5dH0bhzIEgZnRYyTNrqFdEPst6dCNJu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 270c9711aeca6b92e5bf180c9f67508f_JaffaCakes118
Files
-
270c9711aeca6b92e5bf180c9f67508f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a1ce350a89117922678e4f9836a8fcf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
GetSystemTime
CloseHandle
GetCalendarInfoW
LoadLibraryExW
HeapDestroy
GetLocaleInfoA
WriteFile
GetThreadLocale
HeapReAlloc
EnumResourceNamesA
HeapAlloc
HeapSize
GetStdHandle
FindFirstFileW
HeapFree
CreateFileW
LoadLibraryW
GetProcessHeap
SystemTimeToFileTime
lstrcpynW
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ