Static task
static1
Behavioral task
behavioral1
Sample
60b98cf05ba2776afce255bb3ab6af27_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60b98cf05ba2776afce255bb3ab6af27_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60b98cf05ba2776afce255bb3ab6af27_JaffaCakes118
-
Size
247KB
-
MD5
60b98cf05ba2776afce255bb3ab6af27
-
SHA1
6697fc7b0f5c880f8652e6feed16c07ea1a071a7
-
SHA256
e18fe09c6ef4023d0875fac519b4bfdaad93b459e6065ad0a2ec7f6a8429be0c
-
SHA512
7e2d98afdc7d318dc9727350ccd626c84cf5be748cf775ee200279132d094c43a8a659190deb9a5767493d589fe8bcaf09562edc7a60a650a06c37982daf8b5e
-
SSDEEP
6144:V1Pb8GoH/EwipOiSyYJQAU3RII9VC73Bte:7D/ocFpONyuMRIqATBte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60b98cf05ba2776afce255bb3ab6af27_JaffaCakes118
Files
-
60b98cf05ba2776afce255bb3ab6af27_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7996115176ddca61d987131c9cba59f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
RegCloseKey
comctl32
InitCommonControlsEx
gdi32
SelectObject
ole32
CoTaskMemFree
shell32
SHGetFileInfoA
Sections
.text Size: 24KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE