Static task
static1
Behavioral task
behavioral1
Sample
8ad44d2426c0e7456a3cf6fe5eaaf1e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ad44d2426c0e7456a3cf6fe5eaaf1e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ad44d2426c0e7456a3cf6fe5eaaf1e6_JaffaCakes118
-
Size
197KB
-
MD5
8ad44d2426c0e7456a3cf6fe5eaaf1e6
-
SHA1
ca5012d59e72c2755fc5c3c37e8ff3eb97b5e119
-
SHA256
980c0e381a87e8d8e13135eec670dc9903065aada36468e3683b6d1752c8be91
-
SHA512
23f917d386c5a19fd85a440aa51226697537f3b3ca1ccf4566299657c2cbee007800ef9251c607e22d966ef66c756cd4b40d3d314b11e48d9a249dc5f06acb1b
-
SSDEEP
3072:kJxOReKCU3MDUZD6K9VK+idBhNZAxdJIeQ7hqrw1o98PsMaXS8ofL5cJK30u8+R/:08Rp/MA6K9VK+irfKx/8GcsM5H0Kck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad44d2426c0e7456a3cf6fe5eaaf1e6_JaffaCakes118
Files
-
8ad44d2426c0e7456a3cf6fe5eaaf1e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab997975087722516438586ccbf05798
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
msvcrt
_itoa
ws2_32
connect
user32
GetWindowTextA
advapi32
RegEnumValueA
shell32
ShellExecuteA
oleaut32
GetErrorInfo
Sections
.ASS Size: - Virtual size: 268KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASS Size: 191KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE