Static task
static1
Behavioral task
behavioral1
Sample
5d0385634092d8d09c172130df8ad48e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d0385634092d8d09c172130df8ad48e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d0385634092d8d09c172130df8ad48e_JaffaCakes118
-
Size
263KB
-
MD5
5d0385634092d8d09c172130df8ad48e
-
SHA1
fdac98cc6d1053905dbe05b3147aa50252b5efdc
-
SHA256
de77bbdf424edb5d5674dddebf0c8d229e728a4e5e6f30184f7ffe0735bfc8dd
-
SHA512
63105747a3245b7a968b55be99415ad1b536762a8480f005aa4fd2f71bc90b954a2995f0a88eddb30db6188f8b05791f569cbb4a1ddcf778064a7512000038c8
-
SSDEEP
3072:CQxBX47JxvmuAHkrpT94/sSfsC4dUguR+LCa7wotxPbGn0KXKKOlGQfRcMgXL7mT:CQxh8J51a/yCRgm+mElt5GnaDR5gM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d0385634092d8d09c172130df8ad48e_JaffaCakes118
Files
-
5d0385634092d8d09c172130df8ad48e_JaffaCakes118.exe windows:4 windows x86 arch:x86
5064f99dba54900478f2eefda0c31525
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
wininet
FindNextUrlCacheEntryA
Sections
CODE Size: 177KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE