Static task
static1
Behavioral task
behavioral1
Sample
a2f574c036aab40be84228b7b2bcee65_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a2f574c036aab40be84228b7b2bcee65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2f574c036aab40be84228b7b2bcee65_JaffaCakes118
-
Size
9KB
-
MD5
a2f574c036aab40be84228b7b2bcee65
-
SHA1
c909949e6644a0f8703221aafab617aa2494df96
-
SHA256
5be344f07295917264894e69037c5ca29dbb934ca4d689d3994fd298367193ff
-
SHA512
e2e4c0eb4775e15da1e05dd4fdfc402b41e3e66f3c4a0acd80afb0e426b7be76ed4ac8469ffc1119632a8305150449dd4d8c40efaecd2d0ba3ac768e5e62a2cb
-
SSDEEP
192:ZHBTFBbfqvt1l4MYVuxSUl6pXvYFOG3C2xiMqyL/:Lfqvt8MlSi69YS2x+yL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2f574c036aab40be84228b7b2bcee65_JaffaCakes118
Files
-
a2f574c036aab40be84228b7b2bcee65_JaffaCakes118.exe windows:4 windows x86 arch:x86
224311aa6b21d66209b7612d4eb83ae0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
memset
shlwapi
SHGetValueA
wininet
InternetCrackUrlA
user32
wvsprintfA
ole32
CoInitialize
oleaut32
SysFreeString
Sections
.text Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE