Static task
static1
Behavioral task
behavioral1
Sample
5fcc774011af57fc5a2ee0d6b198ba1b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fcc774011af57fc5a2ee0d6b198ba1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fcc774011af57fc5a2ee0d6b198ba1b_JaffaCakes118
-
Size
153KB
-
MD5
5fcc774011af57fc5a2ee0d6b198ba1b
-
SHA1
6b4d7195540b9050ee84d6c96f65f4de16f027b4
-
SHA256
87531b712b622e67e1338ccfc105e4cc172b881803db00626c567bf6ee8376cf
-
SHA512
e0289812b7309c0c05e5b5bc9297c0338f03275c12ed253fd344f35a918b07ffe6f7214a37d9b5a457491f9d45b3a2af42680c2fb071e8927ba93f28760a45d5
-
SSDEEP
3072:p+xjXpF6AeTG/Ot/fJyAyhBGhbR2ULLN35ed43706l3P:gzTngG/Ot/fATmhbcUPNkd4wU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fcc774011af57fc5a2ee0d6b198ba1b_JaffaCakes118
Files
-
5fcc774011af57fc5a2ee0d6b198ba1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
cd755f0bd6c6325507b97d09eabbc9ad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
urlmon
URLDownloadToFileA
Sections
CODE Size: 141KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE