Static task
static1
Behavioral task
behavioral1
Sample
486c4354f04db7647e4bbb85c322e515_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
486c4354f04db7647e4bbb85c322e515_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
486c4354f04db7647e4bbb85c322e515_JaffaCakes118
-
Size
2.3MB
-
MD5
486c4354f04db7647e4bbb85c322e515
-
SHA1
9795aaafbf6736ccdebeb44cc53c2ea1e52a342b
-
SHA256
dc14ec42bc332dbf4dcb59a7f0f8cbde93e2cb4c46470017a6c2f8ca692a357d
-
SHA512
1e3ae62488a093a33f5b6449c511c7b69712412d36e5df8d5dfd8a1676a9fd2e78a22ac626d96bad3d7207baa1057e48594d15f08b5c6bc70f80e81b5d0d4253
-
SSDEEP
49152:+MD5c8LGURnNXPJDoSpfwFN6h9hIIfiNw9Sh5FQ5tx+OtStJx9xKGz:3CcNRn9Vfa6h9hD9ShfCv+Tbx9xKq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 486c4354f04db7647e4bbb85c322e515_JaffaCakes118
Files
-
486c4354f04db7647e4bbb85c322e515_JaffaCakes118.exe windows:4 windows x86 arch:x86
595d2b4ea49d131ec1c8023128e54e92
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
RegFlushKey
comctl32
ImageList_Add
gdi32
SaveDC
ole32
OleDraw
oleaut32
VariantCopy
version
VerQueryValueA
wininet
InternetGetConnectedState
winmm
timeGetTime
Sections
.text Size: 23KB - Virtual size: 14.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE