Static task
static1
Behavioral task
behavioral1
Sample
47b835eb4e864b6f6279633ade5fba3d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47b835eb4e864b6f6279633ade5fba3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47b835eb4e864b6f6279633ade5fba3d_JaffaCakes118
-
Size
34KB
-
MD5
47b835eb4e864b6f6279633ade5fba3d
-
SHA1
4e00d2abaea28397605b5f46db9bfbbb25954173
-
SHA256
da5a29c77d8c708a548b7e64bff3cc2ae6f810adee7e07d99cb4a5f45f933316
-
SHA512
832d885f269a108b8a8cc1ac7a86ec8bb8a73f862a82214d3e78ed558cb31aaeeb9c698982be20a9bd3ed452af85959065fa62ac5d6d0dc0114e396d0d003da7
-
SSDEEP
768:gGkXk5JrhOm60QwSkNwXUdy7Z9F1BSwkw65psSmLNcD/itaAWrvv:gDwrsmrQwSkCXUAF/SwkVauDT7vv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47b835eb4e864b6f6279633ade5fba3d_JaffaCakes118
Files
-
47b835eb4e864b6f6279633ade5fba3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1fc6959235ab1f69b0593eca848a2709
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
wininet
InternetGetConnectedState
Sections
.text Size: 29KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE