Static task
static1
Behavioral task
behavioral1
Sample
8a9399006f5423563cd0fddbedb965c0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a9399006f5423563cd0fddbedb965c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a9399006f5423563cd0fddbedb965c0_JaffaCakes118
-
Size
26KB
-
MD5
8a9399006f5423563cd0fddbedb965c0
-
SHA1
c92ac7c4b3222e2e5962b12ff96afcaba2804006
-
SHA256
1e9e8b429883daf85e44fbd75236dd03053ebf0259293ac5483d84e6ae82c752
-
SHA512
69483b7fc64a7fb7e53d32814a4e53f8d8e96363a23bcaaf54469e4bc8ead027a7cbde68eddce0f1163cb4d992657840e2b89625ba974130357da34e04d510f6
-
SSDEEP
768:LeNK05ntkLIeQ9NQnRv1XS6oGdPEg9zl3:LeNKbIeQ9KnniGVH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9399006f5423563cd0fddbedb965c0_JaffaCakes118
Files
-
8a9399006f5423563cd0fddbedb965c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
023fd2b5bd95863cc54249464e85d0de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
gdi32
GetStockObject
wininet
InternetOpenA
Sections
.text Size: 21KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yy3sh3ll Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ