Static task
static1
Behavioral task
behavioral1
Sample
a7daaf5a8fe6474a554624d5f1b4b2dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7daaf5a8fe6474a554624d5f1b4b2dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7daaf5a8fe6474a554624d5f1b4b2dc_JaffaCakes118
-
Size
1.0MB
-
MD5
a7daaf5a8fe6474a554624d5f1b4b2dc
-
SHA1
b52acb39781b3b0c926648aa005fb663830ab9e8
-
SHA256
0022d036a80dfb1d74c8b09a1f3162e26b7f35e80275fea20e2d48079f9df069
-
SHA512
e164665d37c8b2d1bc8564179bdd5c212f72ad16489748130babe42c612d33473ce18758bd25f38c2b952cb3834fbadaf7a5a96331386095997f155e02cf8495
-
SSDEEP
24576:CfNZp8dvowADAJFenSC/s9OuhMf0S+lQ3UBX:wbwEE9OuhGT+lQ3UR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7daaf5a8fe6474a554624d5f1b4b2dc_JaffaCakes118
Files
-
a7daaf5a8fe6474a554624d5f1b4b2dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b8d45d1c5563804664b94f86bb6af7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
comctl32
_TrackMouseEvent
urlmon
URLDownloadToFileA
wininet
InternetGetConnectedState
shell32
ShellExecuteExA
Sections
.text Size: 1.0MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE