Static task
static1
Behavioral task
behavioral1
Sample
608c7baac6d576c2922263d34d994137_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
608c7baac6d576c2922263d34d994137_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
608c7baac6d576c2922263d34d994137_JaffaCakes118
-
Size
94KB
-
MD5
608c7baac6d576c2922263d34d994137
-
SHA1
feba883ddced52a58f76ff9305982a1e1250744b
-
SHA256
46cf094092212caf9ef9e52f07358ed33dbe08b6a3f58b0e87b7687623ccda72
-
SHA512
c6ed9e72f77bc576a881ab36a685272b07c58f23eb5c6bf5d1fa0cdfb157d638aa33388e613b51df36f6838a13ea996d23f223380dd67baf60687fb851fbb79f
-
SSDEEP
1536:R1hRjsX9I70bJ3C9GoOFLNqXVFFsK50B8UuShHUN4y+vUN4YjYwUnO0T:R3RAO78UGHFoXNUBVqN4y+sNrAO0T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608c7baac6d576c2922263d34d994137_JaffaCakes118
Files
-
608c7baac6d576c2922263d34d994137_JaffaCakes118.exe windows:4 windows x86 arch:x86
de6fdcdc7f4ad649a7529bf91b3c3b02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
ws2_32
WSCInstallProvider
Sections
CODE Size: 89KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE