Static task
static1
Behavioral task
behavioral1
Sample
a597e29812ef100cd38d88b20df64fa1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a597e29812ef100cd38d88b20df64fa1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a597e29812ef100cd38d88b20df64fa1_JaffaCakes118
-
Size
316KB
-
MD5
a597e29812ef100cd38d88b20df64fa1
-
SHA1
3afac25ee97d7e9872e2f3991acac9b47a525a6a
-
SHA256
78a2b4da131119cd1a74076b59595bafafbb0998bb3765daf11b3e3f339e09f9
-
SHA512
52b40fb826e4fb4ffc93df2f85f268e69934fc7d02561003754d0ef01c42907846af4c7339b760381b4e330de88fde2eb25d29236d300dbb00e022e0f8db9905
-
SSDEEP
6144:2kwFy0jk7KMCK2xOc3PsiorILZA4iRX9/dWxfKoI:2kwFywzxOcEieVHXWu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a597e29812ef100cd38d88b20df64fa1_JaffaCakes118
Files
-
a597e29812ef100cd38d88b20df64fa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
ddee233d15779b69f4f9ef746d299efe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
AdjustTokenPrivileges
avicap32
capCreateCaptureWindowA
comctl32
ImageList_Add
gdi32
BitBlt
ole32
IsEqualGUID
oleaut32
SysAllocStringLen
shell32
SHGetSpecialFolderLocation
urlmon
URLDownloadToFileA
user32
ActivateKeyboardLayout
winmm
mciSendStringA
winspool.drv
ClosePrinter
ws2_32
WSACloseEvent
wsock32
WSAAsyncGetHostByName
Sections
.text Size: 304KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ERJCJ Size: 90B - Virtual size: 90B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE