Static task
static1
Behavioral task
behavioral1
Sample
2c436349f4c3c4b6ead157285d520de3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c436349f4c3c4b6ead157285d520de3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c436349f4c3c4b6ead157285d520de3_JaffaCakes118
-
Size
59KB
-
MD5
2c436349f4c3c4b6ead157285d520de3
-
SHA1
f17d5fc5cbbe672c1de344a3338d9bbd49b9089c
-
SHA256
2e2228489e2551af94ade0b7b6cce11847950fd84730f9d9fc74ebb2e40d8133
-
SHA512
12b5dfb9cccd981db290b7827b6cc5f9794ae64f08f23c3863825312fc537304a2407ea65ab5c0580623bc473b3771db10ee036343c11f9d8b2173253cc4a95f
-
SSDEEP
768:TuVWLBcEvZQT1gjB+kPh3T2OshjMQJnDPuaAZ78bn6HoQPHzIGAPsteoN:FBvUWgkFojMQJnLAIbn6BbEste
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c436349f4c3c4b6ead157285d520de3_JaffaCakes118
Files
-
2c436349f4c3c4b6ead157285d520de3_JaffaCakes118.exe windows:5 windows x86 arch:x86
d9d88fbfb98286af192824d0eebbb5d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
gdi32
CreateFontW
version
VerQueryValueW
shell32
Shell_NotifyIconW
winmm
timeEndPeriod
ntdll
RtlNtStatusToDosError
Sections
.text Size: 22KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE