Static task
static1
Behavioral task
behavioral1
Sample
8a1dac6f998519e2b8d3cc978e059c46_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8a1dac6f998519e2b8d3cc978e059c46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a1dac6f998519e2b8d3cc978e059c46_JaffaCakes118
-
Size
956KB
-
MD5
8a1dac6f998519e2b8d3cc978e059c46
-
SHA1
97b02491ed4adc126676431296b55c4e8f7e652c
-
SHA256
3d2bbee4714c1f507dc4496fbcbf9a084ca2fa818e0c593700b5548b27f3fcc1
-
SHA512
bd0b00ebb40517b2fe25f34f0b8f1c765ec12b2caaa6af5ce15999de16b5333599ead84f59c7b7baddb229fa1bc1600f45cdaead22fef2d44de5151196a22052
-
SSDEEP
24576:erRkhA/w9M1NMbNLXf3DGcFnUWR1uGAm6try+dj9fXPi9kY1:eWhA/iMPuGcFdR8GAb/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1dac6f998519e2b8d3cc978e059c46_JaffaCakes118
Files
-
8a1dac6f998519e2b8d3cc978e059c46_JaffaCakes118.exe windows:4 windows x86 arch:x86
6df254914294ddff5118d9935c4b053e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
msimg32
GradientFill
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
urlmon
CoInternetCreateZoneManager
wininet
InternetSetOptionA
shell32
ExtractIconA
Sections
.text Size: 915KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE