Static task
static1
Behavioral task
behavioral1
Sample
426a7e7aa9b40d047ebfb40ff1d5dd84_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
426a7e7aa9b40d047ebfb40ff1d5dd84_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
426a7e7aa9b40d047ebfb40ff1d5dd84_JaffaCakes118
-
Size
419KB
-
MD5
426a7e7aa9b40d047ebfb40ff1d5dd84
-
SHA1
1bd6387b1ea8dd9510cf0c4ecf9cf33efadcaeab
-
SHA256
5e301e70ee000517d63da628d1210a517ff3549c2e2fad60ddd7123d02d8864d
-
SHA512
e41b3e58b062949804435e7e87e05274971790dc5e679f182749ec6c75acd4da9c27e0ba84c1e06738322d3141b81b74a6de8e736f477a116f5c12413ddde712
-
SSDEEP
12288:P8tET4Cr+00/ldXqd7ElZGyYop20mz28CZGfdikBk:jx+nXqd7OfCbsGfdia
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426a7e7aa9b40d047ebfb40ff1d5dd84_JaffaCakes118
Files
-
426a7e7aa9b40d047ebfb40ff1d5dd84_JaffaCakes118.exe windows:4 windows x86 arch:x86
f45899327c851d2e630c0078db201655
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
netapi32
Netbios
Sections
.text Size: 399KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE