Static task
static1
Behavioral task
behavioral1
Sample
93aaed576e6a4c8097e804dc66cb1f73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
93aaed576e6a4c8097e804dc66cb1f73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93aaed576e6a4c8097e804dc66cb1f73_JaffaCakes118
-
Size
301KB
-
MD5
93aaed576e6a4c8097e804dc66cb1f73
-
SHA1
28ed54021de0f8b48a11dea066e53860d340b207
-
SHA256
499322eb2c2180688b29e0e4f40d800e67a6f4600fe3f1ff1663d197816d52cc
-
SHA512
fd053e9fd3b8ba8380e5b3a26288f18b2af3c4531e1fe753ca5fb01766fc9dcca3db37724a62eecfb2fbf4d76d0e96d9a47562bea0b80e8b8abade8199897fd5
-
SSDEEP
6144:wJEYERqaQiEYixXAkmOgoUpMEEdlntRb5A+na4S35EQwN:K5+qntJxjfg5mxdltZ5A+na4RQwN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93aaed576e6a4c8097e804dc66cb1f73_JaffaCakes118
Files
-
93aaed576e6a4c8097e804dc66cb1f73_JaffaCakes118.exe windows:4 windows x86 arch:x86
92bfd8d0eccfd8944769d829f6305c80
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
ole32
OleDraw
comctl32
ImageList_Add
wininet
InternetOpenA
wsock32
WSACleanup
Sections
.text Size: 295KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 90B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE