Static task
static1
Behavioral task
behavioral1
Sample
4d32e34fa656396b94de5f4307e32bf3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d32e34fa656396b94de5f4307e32bf3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d32e34fa656396b94de5f4307e32bf3_JaffaCakes118
-
Size
319KB
-
MD5
4d32e34fa656396b94de5f4307e32bf3
-
SHA1
fdb774630ae9434055046025baa87ed22297c4ac
-
SHA256
694f84337dc1f950c9c00c5fa14b5ef0953c49a3bae5ef86fdaccd050fe06ed7
-
SHA512
6caf84237e3c95dd9aeaa75d8f0c8c8d9192fd51008d718a4fc7ca256bbae4bf1d95b964176d259a054e378b15cb1456f323be86b3e622c6949328072c4ec44f
-
SSDEEP
3072:u2qkDquknQ+bxxPd7zAIRfcxkJFRanLhlGiN9rTL9OWn/pcg53vs/Inb:u2k7jdWxkJULLL9f/3Rn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d32e34fa656396b94de5f4307e32bf3_JaffaCakes118
Files
-
4d32e34fa656396b94de5f4307e32bf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f0c81b6f8530eba9d7b8894954822d1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
shell32
Shell_NotifyIconA
Sections
.text Size: 149KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE