Static task
static1
Behavioral task
behavioral1
Sample
5a5d78d7ff6d1e1060af7283d5702f86_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a5d78d7ff6d1e1060af7283d5702f86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a5d78d7ff6d1e1060af7283d5702f86_JaffaCakes118
-
Size
386KB
-
MD5
5a5d78d7ff6d1e1060af7283d5702f86
-
SHA1
9811a88e81bb1abefbfd11223f92c5654d9f84d5
-
SHA256
c8660711ec189ba20a726aebf6c09017da54f5a528273fbc0eab31383d13e746
-
SHA512
21910f7c44181e5e460746127de68f5c0ebc3d362a9f5739066ee46194f1a78fa249b179ac235d23f5fed4fc615e5d076f038b25918f0254a5cd9a7c31723008
-
SSDEEP
6144:u0vrz5BN7DWJKmlkgBZz+Hrav///zd+8tRK7WVZ7+fob9:u0vP5Kl7ZSGA8LKWZ7+C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a5d78d7ff6d1e1060af7283d5702f86_JaffaCakes118
Files
-
5a5d78d7ff6d1e1060af7283d5702f86_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8f203025326575269278983e01165a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
urlmon
URLDownloadToFileA
comctl32
ImageList_SetIconSize
netapi32
Netbios
Sections
CODE Size: 177KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE