Static task
static1
Behavioral task
behavioral1
Sample
6f26c98276092a23bc574478852f55e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f26c98276092a23bc574478852f55e9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f26c98276092a23bc574478852f55e9_JaffaCakes118
-
Size
95KB
-
MD5
6f26c98276092a23bc574478852f55e9
-
SHA1
a9d22803e3ca37847f1e9a558e2356746036207e
-
SHA256
2e63b6b7b5302091f7f106323d5fd80e29b0d625d4f779eef49ab1b799cbc4b6
-
SHA512
fae4fd9e5c27b518c40fbb640077895e19f2720f49b25be5fd493cad76801c222c6beffc8c372570c925efef4ea74c7ee6c17389340980a5d092b09ad5536162
-
SSDEEP
1536:/sheSVNaIEWngJEr7ezsDEjvfBpX52B+AZNR+N41jNOXbVu0gm26n5ib1R9+6rCJ:UhefFWnp2zMafjXIU+ouN6c/9frYb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f26c98276092a23bc574478852f55e9_JaffaCakes118
Files
-
6f26c98276092a23bc574478852f55e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
2af69e734ced8d10952e1507b94f89af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
shell32
SHGetFileInfoA
wininet
InternetSetOptionA
urlmon
CoInternetCreateZoneManager
shlwapi
SHAutoComplete
Sections
.text Size: 30KB - Virtual size: 17.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE