Static task
static1
Behavioral task
behavioral1
Sample
7892afff894df42c67b0b2213134d73a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7892afff894df42c67b0b2213134d73a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7892afff894df42c67b0b2213134d73a_JaffaCakes118
-
Size
1.3MB
-
MD5
7892afff894df42c67b0b2213134d73a
-
SHA1
72c1b68f04b0eae43550838f6c3e8cb27fc7b194
-
SHA256
fa5a3577bd305f2e5d764e9629eb14c883bc296fe0617036dcdb8f27990a108b
-
SHA512
d43855263f95708cbc06a23a390771d5afafab1cf24b86f4a0c511d84779a0245c769c9157f5a6e923d4e764b122b690f7c1ed2cc15fb43a9d1bc3f391985ff5
-
SSDEEP
24576:/C4V7AzIEvZ7DwUg8aM+TNgZC3fddwCdoSDVpttjp0OuyQNE7oJZ65u4A:/CuA/Vg8aZNc21rVDtr9L7oz4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7892afff894df42c67b0b2213134d73a_JaffaCakes118
Files
-
7892afff894df42c67b0b2213134d73a_JaffaCakes118.exe windows:5 windows x86 arch:x86
acd351cd6dd730de16da8c782c0bfad3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
shfolder
SHGetFolderPathW
ole32
OleUninitialize
comctl32
InitializeFlatSB
winspool.drv
OpenPrinterW
shell32
ShellExecuteW
wininet
InternetGetConnectedState
winmm
timeGetTime
Sections
.text Size: 1.1MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 254KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE