Static task
static1
Behavioral task
behavioral1
Sample
8e2e417989a9a5f5f1b8706d917f6eb9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e2e417989a9a5f5f1b8706d917f6eb9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e2e417989a9a5f5f1b8706d917f6eb9_JaffaCakes118
-
Size
66KB
-
MD5
8e2e417989a9a5f5f1b8706d917f6eb9
-
SHA1
5896a679c5a7f8d41cab634b88cb6e5e7a4a9a87
-
SHA256
db55e6451193a3800abe560ff8944a5bfcc540d97c2753317ed4e12348193e9a
-
SHA512
b0c6994969ea9a88c033fa639eddf8ce222fc353a20d2492911d4e20f446991ec3272ed554c4b20e7d059a0d4eade3e9856de31924becbc0da05d755ef136a8e
-
SSDEEP
1536:6uyvBkL3+DbaV5T62TCdeR8MIaQrpEa42iBsqrr0S:6p5kK4F/D8Q12iBDrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e2e417989a9a5f5f1b8706d917f6eb9_JaffaCakes118
Files
-
8e2e417989a9a5f5f1b8706d917f6eb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a7c8ab7b0c55a1d2edd8860ee5f19d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
wininet
InternetOpenA
dnsapi
DnsQuery_A
ws2_32
recv
user32
GetCursorPos
advapi32
RegCloseKey
Sections
.dfgg Size: - Virtual size: 216KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dfgg Size: 65KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE