Static task
static1
Behavioral task
behavioral1
Sample
83d4561365d994d8d2bfe5c87e5401d1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83d4561365d994d8d2bfe5c87e5401d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83d4561365d994d8d2bfe5c87e5401d1_JaffaCakes118
-
Size
193KB
-
MD5
83d4561365d994d8d2bfe5c87e5401d1
-
SHA1
00495d64a21f01c44ab349ff608e22019d9f56ea
-
SHA256
b4f4acb833bb9cfb2a8a4019efe366add0941dd3d87d578e0c48b7b5aceeba9e
-
SHA512
fd8b24b7219c770ed7b65c1ba0281e81cd8c6a0c0282983f8b474f17b124c85944970d97332626dba82f07953b6fe5434084352619ce403df5d6269b9933d830
-
SSDEEP
6144:K+bW0Cg4R2dUjrZax+GN//z+WgSqLEy0:K+6/2dCEnN//qw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d4561365d994d8d2bfe5c87e5401d1_JaffaCakes118
Files
-
83d4561365d994d8d2bfe5c87e5401d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c412435eadbb8f5c28091b1603484ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
IsDialogMessageA
gdi32
CreateBitmap
comctl32
ord17
shlwapi
PathFindFileNameA
oleacc
LresultFromObject
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
oleaut32
VariantInit
Sections
.text Size: 159KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE