Static task
static1
Behavioral task
behavioral1
Sample
82cdbc1deaafc72103f438dbd037725f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
82cdbc1deaafc72103f438dbd037725f_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82cdbc1deaafc72103f438dbd037725f_JaffaCakes118
-
Size
35KB
-
MD5
82cdbc1deaafc72103f438dbd037725f
-
SHA1
cf4b533ee061abbf03836c54b3ef7f8045d0646e
-
SHA256
8b563e5aef833691a403ffab7a3628d6ebef7d7e0c5b949ee3d783773713f08b
-
SHA512
232eb941387293fd0a8fbd2c3c65cb8f50e57e27ef3fb3e24aa7c42ed048e1ac2da138a8d713c278152fd3f9f2c370e226ffcd10261b0a904eec15e9be9253bb
-
SSDEEP
768:bhFHUeHEfjfcQa3NsuuA3xEhFLX/a1SENhwBzmZlxs5kkXmfz:l9U/fjfcoHhF2cCSaxs5mz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82cdbc1deaafc72103f438dbd037725f_JaffaCakes118
Files
-
82cdbc1deaafc72103f438dbd037725f_JaffaCakes118.exe windows:1 windows x86 arch:x86
3ad4216ef5b675c2fb54d64c31083df5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
oleaut32
VariantClear
urlmon
URLDownloadToFileA
user32
CharNextA
Sections
.PACKMAN Size: - Virtual size: 112KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 34KB - Virtual size: 34KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE