Static task
static1
Behavioral task
behavioral1
Sample
7334c35e416be6344e1222d9f09b4e2f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7334c35e416be6344e1222d9f09b4e2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7334c35e416be6344e1222d9f09b4e2f_JaffaCakes118
-
Size
412KB
-
MD5
7334c35e416be6344e1222d9f09b4e2f
-
SHA1
dbb503bc378a5457f62365e479f669526239494c
-
SHA256
c755094781d603955b56a1838d3a6ecfd3f6ed1d4a9a8be6c57211909903f3ff
-
SHA512
4df4935ba5a20cb61885d3dc61fdbcf49f7b0064a2ce6824ae3011060c25c5f6b6a5816df38ff648d1393b674d098c9e18bc2838a564b53c91e5eca3a47d1a79
-
SSDEEP
12288:y8tET4Cr+00/ldXqd7ElZGyYop2n3NS2byXqesB:kx+nXqd7OfoJyXqhB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7334c35e416be6344e1222d9f09b4e2f_JaffaCakes118
Files
-
7334c35e416be6344e1222d9f09b4e2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f45899327c851d2e630c0078db201655
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
netapi32
Netbios
Sections
.text Size: 399KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE