Static task
static1
Behavioral task
behavioral1
Sample
684331fe8281946993936fb579b9da53_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
684331fe8281946993936fb579b9da53_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
684331fe8281946993936fb579b9da53_JaffaCakes118
-
Size
647KB
-
MD5
684331fe8281946993936fb579b9da53
-
SHA1
661deff6ac96c2d92b70a067ef5af50f62fc5dc6
-
SHA256
d73dca5d8598790180684df968036362a055faf99100851780b7c970af6242fb
-
SHA512
6566ae46c552f94fe24002d24ebd896c26e155884523c03fbeef8b36c424644fe4cf457355eeb4a7002b99d8d3ec534772dc41fc00cef1bfb067afd216a6beac
-
SSDEEP
12288:hV/v8DzUiWFeTqGsaU4C/fXfEBxPQlvdtbW4++mQbL5RnLmSp/r:h5vWzbEiq8usBxqOzJifmSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 684331fe8281946993936fb579b9da53_JaffaCakes118
Files
-
684331fe8281946993936fb579b9da53_JaffaCakes118.exe windows:4 windows x86 arch:x86
0aeec22cc70241d0dfe9212430883f1d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
imm32
ImmGetIMEFileNameA
Sections
CODE Size: 612KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE