Static task
static1
Behavioral task
behavioral1
Sample
7071b1a71fca98d4f881432ca1e36b22_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7071b1a71fca98d4f881432ca1e36b22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7071b1a71fca98d4f881432ca1e36b22_JaffaCakes118
-
Size
68KB
-
MD5
7071b1a71fca98d4f881432ca1e36b22
-
SHA1
a1043e3af857b77ae9b41f4d8272981b472c13f7
-
SHA256
d4924cce463d5a8ab70e23cf3d85e91b16c0c574b535131710b884ed8c44430f
-
SHA512
06f1a83441bb0da5de5b2e61843c92943a25abed58ce68d2da93f31759e6fdb3dfffe0dd221a19f5461365bc8aae6bb27bb8a04007685175644a7a1e29516c12
-
SSDEEP
768:77JHEgrjcp/EgrgwfCsNn2rvx/ZskV3RcXozoN+jsQxRFTZ1SnvuREYqvtY:7tHTcVlrn2LxKkwKEesQhZMigvt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7071b1a71fca98d4f881432ca1e36b22_JaffaCakes118
Files
-
7071b1a71fca98d4f881432ca1e36b22_JaffaCakes118.exe windows:4 windows x86 arch:x86
cca519a52d58b32ef18954290d653b70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msohev
ord6
ord5
ord7
ord3
ord2
ord8
ord4
user32
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeClientTransaction
kernel32
GetVersionExW
GlobalAlloc
GetLastError
WideCharToMultiByte
CreateProcessA
CreateProcessW
GetCommandLineW
GetACP
GlobalFree
ReleaseMutex
CreateMutexW
GetModuleFileNameA
GetModuleFileNameW
CloseHandle
GetProcAddress
LoadLibraryA
SetLastError
ExitProcess
CreateFileA
CreateFileW
MultiByteToWideChar
CreateMutexA
advapi32
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegEnumKeyExW
RegEnumKeyExA
RegEnumValueW
RegEnumValueA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegSetValueExW
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
omkolae Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE