Static task
static1
Behavioral task
behavioral1
Sample
893b6939c8e0b623aa1428ae2dc839ae_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
893b6939c8e0b623aa1428ae2dc839ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
893b6939c8e0b623aa1428ae2dc839ae_JaffaCakes118
-
Size
74KB
-
MD5
893b6939c8e0b623aa1428ae2dc839ae
-
SHA1
b843fe408506d5c360e0de246ea3a7e7b347e18c
-
SHA256
84865f145e7155f6782e07ed42a9d261fc0d92157557481e33257f339a6f9dae
-
SHA512
006c9c375473474e2ffbd52ec5ae39519ea53d96e5f8defbc15966452031180a878cc0a92580d4ae15923f8301488e4972486244ae86a33ebd973448c8e81152
-
SSDEEP
1536:QvqSguSgHAVQkye+0bjHvfUxkFHYBitn2TKrg85lPZYuIn3DM6OpL:QvqSguS8AicLbjPMAYIx2J85lBYukXa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 893b6939c8e0b623aa1428ae2dc839ae_JaffaCakes118
Files
-
893b6939c8e0b623aa1428ae2dc839ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
79ee449508f3abdaefc933566f082f1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WriteConsoleOutputA
dnsapi
DnsRecordListFree
ws2_32
recv
wininet
HttpQueryInfoA
user32
GetCursorPos
advapi32
RegCloseKey
Sections
.code Size: - Virtual size: 236KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 73KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE