Static task
static1
Behavioral task
behavioral1
Sample
8c36d1b87e37658a494c85142b79889e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8c36d1b87e37658a494c85142b79889e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c36d1b87e37658a494c85142b79889e_JaffaCakes118
-
Size
237KB
-
MD5
8c36d1b87e37658a494c85142b79889e
-
SHA1
ad7468e5f7b7c2add12d5b73b1e20d0acd612419
-
SHA256
f885ad3b9e4415e61b876a4308906f42ab5c2ed80ae2a6757a7379d0d0b7756a
-
SHA512
212bd9de924cb0c3011a6f6209efea39369e9fde47c5ce5ce9dd61ed246dcaa1cf60ff9d3e31d1ccb6cbb54358c82decb25445bd2e1b3e61b731ac0576eea33b
-
SSDEEP
6144:jGybDiucc05oHldfDfYryqZJs/F0kDoQAwOEvlAc7+TZry:jGuZa5oTfYrLZiN0ioQA/9+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c36d1b87e37658a494c85142b79889e_JaffaCakes118
Files
-
8c36d1b87e37658a494c85142b79889e_JaffaCakes118.exe windows:4 windows x86 arch:x86
871f0a5c7d87a18ae7522020fd00d0af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
wsock32
__WSAFDIsSet
ole32
CoTaskMemFree
shell32
ShellExecuteExA
urlmon
URLDownloadToFileA
comctl32
_TrackMouseEvent
wininet
InternetOpenUrlA
winmm
waveInUnprepareHeader
netapi32
Netbios
gdiplus
GdipGetImageEncoders
msacm32
acmStreamUnprepareHeader
ntdll
NtQuerySystemInformation
NtUnmapViewOfSection
ws2_32
WSAIoctl
shfolder
SHGetFolderPathA
avicap32
capGetDriverDescriptionA
Sections
.text Size: 228KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE