Static task
static1
Behavioral task
behavioral1
Sample
845df3e21b80d1777683d0619ee3a858_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
845df3e21b80d1777683d0619ee3a858_JaffaCakes118
-
Size
334KB
-
MD5
845df3e21b80d1777683d0619ee3a858
-
SHA1
fdf06e757ad708d0ac8706a40c0f86b506198d5b
-
SHA256
431b3bb0d3d5520aad1ec26f0e80db1bca4bf965c270449a00dacd76fc1f29fd
-
SHA512
6cd678036b866045c084d991a8d32d6646703a813542812dcbf1c44abeae8ba7a1dc909d8c4ac4cb1be456e45ce6d0c7dce8075aaa6575c3f6d34a2f51b7932b
-
SSDEEP
6144:/6oHRKXES7qX+1f7nepTrYydsVXcj2q5GcRdGe/zbFEpZIZv3SJqaOzFUpwTB:ETlnkTrY9K35NN/a7eacaOxQwTB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 845df3e21b80d1777683d0619ee3a858_JaffaCakes118
Files
-
845df3e21b80d1777683d0619ee3a858_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b1367cd8ec5bc368703bd039296e4ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
RegCloseKey
comctl32
ImageList_Add
gdi32
SaveDC
ole32
CoInitialize
oleaut32
VariantCopy
shfolder
SHGetFolderPathA
version
VerQueryValueA
wininet
InternetOpenA
winmm
timeEndPeriod
Sections
.text Size: 19KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE