Static task
static1
Behavioral task
behavioral1
Sample
4768a3fc1dfbdb48d1003b686894b0fe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4768a3fc1dfbdb48d1003b686894b0fe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4768a3fc1dfbdb48d1003b686894b0fe_JaffaCakes118
-
Size
56KB
-
MD5
4768a3fc1dfbdb48d1003b686894b0fe
-
SHA1
a802ee069fd2c74a506ebc750fbd4d3a785070f4
-
SHA256
4174d03a94a4b7be18cf6ad663c0246445eef355fdc8b8d7cb245b1770a14e0c
-
SHA512
4fcb227c1286c6888e01017ef7a7685555819f0e28db5bd0b85490ea472ec153ca3ef1a418c97ed825eb18094a62f182274bd7849f80646f9ca7a909cba0c44c
-
SSDEEP
768:a9jsxF4bR37llLOgCIM1mgcVxgLyo1+xbHlICC3sUa9m6ceqDPTtZqQDdJVyrTZu:atp7lliRIUpybFHC1aFqZTDdJi9Yfe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4768a3fc1dfbdb48d1003b686894b0fe_JaffaCakes118
Files
-
4768a3fc1dfbdb48d1003b686894b0fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
47ab560ff8d78ede941b0b043f8a1d33
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
PeekMessageA
advapi32
CryptEncrypt
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetGetConnectedState
ws2_32
WSACleanup
ole32
CoUninitialize
oleaut32
SysAllocString
version
GetFileVersionInfoA
gdi32
GetDeviceCaps
Sections
.text Size: 50KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE