Static task
static1
Behavioral task
behavioral1
Sample
4c5919e4cf6b7251a779182acc1917ab_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c5919e4cf6b7251a779182acc1917ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c5919e4cf6b7251a779182acc1917ab_JaffaCakes118
-
Size
274KB
-
MD5
4c5919e4cf6b7251a779182acc1917ab
-
SHA1
b542a87be44d570524753671ea8e6b9863f76ed0
-
SHA256
76499139b08bf39a064a7b8f2f587eac97ed67b939d8d2070b643701a6288665
-
SHA512
9186f22efe2afc038faf14b9b933ffe122999ccac81d82b7f639911c90a8f0ba55e409385838183483e560e4f7d0e6b401f40d19fcc369f6f934ad2f7479e6f5
-
SSDEEP
6144:CnSxQIYx+zz09+oKom9rZi2XkZRA5t+WCYkOGAnyltN+cXxikk4HGN:DM+A+0sZi2iAaWC/hAnyx+cXYkdGN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c5919e4cf6b7251a779182acc1917ab_JaffaCakes118
Files
-
4c5919e4cf6b7251a779182acc1917ab_JaffaCakes118.exe windows:0 windows x86 arch:x86
bc57b07dd8fe939447f211e16b5f8f67
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAIoctl
oleaut32
SysFreeString
winmm
waveOutWrite
avicap32
capCreateCaptureWindowA
gdi32
UnrealizeObject
mpr
WNetOpenEnumA
user32
CreateWindowExA
advapi32
ReportEventA
wininet
InternetReadFile
shell32
Shell_NotifyIconA
msacm32
acmFormatChooseA
version
VerQueryValueA
comctl32
ImageList_SetIconSize
wsock32
WSACleanup
Sections
code Size: 261KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code Size: 174B - Virtual size: 174B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE