Static task
static1
Behavioral task
behavioral1
Sample
61b84af3aaf3b15cfbcd40b78eda404c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61b84af3aaf3b15cfbcd40b78eda404c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61b84af3aaf3b15cfbcd40b78eda404c_JaffaCakes118
-
Size
412KB
-
MD5
61b84af3aaf3b15cfbcd40b78eda404c
-
SHA1
c14430c835814a96be8473f97a9c6f69330aaaeb
-
SHA256
c1e6f3149d7db2d1fbb2d41db754bdb61de385dfb131047be1c92b5934261cee
-
SHA512
8b2604bdde4c06e71b505e3a5c5bff978a78ad77281971e8bbd6c1c404a697b87d15ed6faa4ac8bde27058de31220ff9d349c112f5cb53996928081b7c3399e4
-
SSDEEP
12288:6anssOPi7DYI4VkBqi+nefC3sKkkBx3Ik0nzU8J5d7D05LUSk7/r:6anssOPihBX+2CckBx4k0n/JsKSk7/r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61b84af3aaf3b15cfbcd40b78eda404c_JaffaCakes118
Files
-
61b84af3aaf3b15cfbcd40b78eda404c_JaffaCakes118.exe windows:4 windows x86 arch:x86
89b82d35a311f8fddc012433135498dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
Sections
.text Size: 24KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE