Static task
static1
Behavioral task
behavioral1
Sample
87dfc55f4f1dc7088274278562df6811_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
87dfc55f4f1dc7088274278562df6811_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87dfc55f4f1dc7088274278562df6811_JaffaCakes118
-
Size
206KB
-
MD5
87dfc55f4f1dc7088274278562df6811
-
SHA1
b687a3d141c5e58d5748b8a585d50c05b91ac688
-
SHA256
93485a41224d6bdf8aec08a7752ddb40651d400b1c651cfe43dc571af99a76b4
-
SHA512
bac41aa6f9bc627d0039e524c0729f3ddfaeb911df8126a26703d08c9d860cb3574ef482af8f29fa9e322a8312e672a290024325d827d276d7303c19549eb157
-
SSDEEP
6144:HR4xYMwCzZ7O69fZRdGBPllW9CB60p3JD3fhW48:HY/zxFvGJW9vs3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87dfc55f4f1dc7088274278562df6811_JaffaCakes118
Files
-
87dfc55f4f1dc7088274278562df6811_JaffaCakes118.exe windows:4 windows x86 arch:x86
7be281a42707c903aadc4f8d07c4151f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
urlmon
URLDownloadToFileA
Sections
CODE Size: 188KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE