Static task
static1
Behavioral task
behavioral1
Sample
648ab69c15d7bd08b222995747e1c334_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
648ab69c15d7bd08b222995747e1c334_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
648ab69c15d7bd08b222995747e1c334_JaffaCakes118
-
Size
2.6MB
-
MD5
648ab69c15d7bd08b222995747e1c334
-
SHA1
ac1d848a6d7ef226dda54372aa424c8057752af5
-
SHA256
43ed287a07321d9b1c50d1765792c431858874080137f9cd4f0e2f444b298083
-
SHA512
244aee4c8514531a83fda6d2e81851061d23da841bf8e2c4fbb86b6abd24bf187564fbb2d8408d43f6c4cf3e7d631fbf6a2a8be53eb516c507d4cd925bccacb5
-
SSDEEP
49152:kNHTBnYgl4eKL0P/kfrk8n0Rky+U6LOAR4sTDSNv1uXmEdLXehpi5qOFhWd2qU6:M+glepoYCH6DDSNv2ddrehpd2qU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648ab69c15d7bd08b222995747e1c334_JaffaCakes118
Files
-
648ab69c15d7bd08b222995747e1c334_JaffaCakes118.exe windows:5 windows x86 arch:x86
01e6b6459d52952078a9ab8a5be44793
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SendDlgItemMessageA
gdi32
MoveToEx
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegQueryValueW
shell32
DragQueryFileW
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
ws2_32
WSAAddressToStringA
oledlg
OleUIBusyW
ole32
CLSIDFromString
oleaut32
VariantTimeToSystemTime
gdiplus
GdipCloneImage
iphlpapi
GetAdaptersInfo
winmm
PlaySoundW
wininet
HttpSendRequestW
dbghelp
MiniDumpWriteDump
version
GetFileVersionInfoSizeW
imm32
ImmGetContext
Sections
.text Size: 2.6MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE