Static task
static1
Behavioral task
behavioral1
Sample
835a1b9355fd2f2bb58b64e1e726312a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
835a1b9355fd2f2bb58b64e1e726312a_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
835a1b9355fd2f2bb58b64e1e726312a_JaffaCakes118
-
Size
182KB
-
MD5
835a1b9355fd2f2bb58b64e1e726312a
-
SHA1
a022eaefd2092853ca58f3ac67f1db220fefab1a
-
SHA256
3fda1f0e356aa08e14c4fb0a60fd8e140fc7fe609b9841b56d357469f3de4fdf
-
SHA512
7d282960ceb80c588ce8568768d33ba5927f23e9854fb57ea04d699ea29d139df2f4adcf5f1d2b6fa18328361fb938301edb13e08af5916d22897b26eb817543
-
SSDEEP
3072:F3RHdLyXVc69aUyWahjuNjLaq/h14GkWDKd4mEj6DihdQ0z/bRY26t0OR4KKt+Sx:F39dLq66QUaeLhv4GBDKd4B1Q0z1IdK9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 835a1b9355fd2f2bb58b64e1e726312a_JaffaCakes118
Files
-
835a1b9355fd2f2bb58b64e1e726312a_JaffaCakes118.exe windows:4 windows x86 arch:x86
c55d58516ab8b94df1945dd02ca3b318
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
CODE Size: 172KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE