Static task
static1
Behavioral task
behavioral1
Sample
a4836e6f93b2fb834405385ee4ea596f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a4836e6f93b2fb834405385ee4ea596f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4836e6f93b2fb834405385ee4ea596f_JaffaCakes118
-
Size
245KB
-
MD5
a4836e6f93b2fb834405385ee4ea596f
-
SHA1
eb9b17a83fb36cc4e96e03e2407dd56986fe5d16
-
SHA256
9cecbcb197f41afe9c4921b682776605a2464db936113ceed495dbb7c37ce70d
-
SHA512
2ad6fefcece83a3240c193497720d837e2ef78602664204cacc6133dc59a1d4cdec77f93bebe2d87e3d4273746def766e22ee931964998cc2ebbc69ceba0588f
-
SSDEEP
6144:P9KREq1oV/z55y1OLUHM/b+VN4viL/67Qp0pAqPY:ARw/K1OLiM/iVaviL/6QpmAh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4836e6f93b2fb834405385ee4ea596f_JaffaCakes118
Files
-
a4836e6f93b2fb834405385ee4ea596f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7cc415347abb3a15621a1a44dfd379b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
VirtualAlloc
Module32First
Heap32First
Heap32Next
WriteFile
Heap32ListFirst
Sleep
user32
GetMessagePos
SendMessageA
wininet
InternetConnectA
ole32
CoInitialize
advapi32
RegQueryValueExA
Sections
pQHMAlld Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FRVcGBkN Size: 1024B - Virtual size: 706B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DXfFzsTj Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RPgrnVsM Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE