Static task
static1
Behavioral task
behavioral1
Sample
34550dab589ea25651f365efb3ca1f37_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34550dab589ea25651f365efb3ca1f37_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34550dab589ea25651f365efb3ca1f37_JaffaCakes118
-
Size
173KB
-
MD5
34550dab589ea25651f365efb3ca1f37
-
SHA1
c01a9d1ccac365483381c2342708549c73217f06
-
SHA256
a4948c6c4acaa1cae2eb859f6d3b97326660145f55e7e6b44d245bf46e2cd8b9
-
SHA512
9fcbba4a5f05bb682629b4bb7b179b917ea52c6d99e5f34e121161dd83e63a8728f79a07327acf908813f3b3f5aab912ca6207c3eb8dcee29af05bb6a015f37c
-
SSDEEP
3072:O4jqDOAnJZE+6vGMWq4E1wTakIfWeW2Fsn85bCymn/S/36dZkWB3u:OUDb+6Oq4E+TsDj3bYK/qoyu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34550dab589ea25651f365efb3ca1f37_JaffaCakes118
Files
-
34550dab589ea25651f365efb3ca1f37_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2bbddb8c010773f04c2d9dd29668462
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
Sections
CODE Size: 140KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE