Static task
static1
Behavioral task
behavioral1
Sample
ac513c773a58ac1cd6c2dace38dd0c5a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac513c773a58ac1cd6c2dace38dd0c5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac513c773a58ac1cd6c2dace38dd0c5a_JaffaCakes118
-
Size
595KB
-
MD5
ac513c773a58ac1cd6c2dace38dd0c5a
-
SHA1
80b6354bb5ec088015ff79da07270acf253a4f60
-
SHA256
2d8e2eeade5658147e833cde5ecda4a934fa78d0eea75465bf8b674cd58ae807
-
SHA512
1b6e19feebc6c2cae57d449f7be03e3642efd5a6f614957b862b01f806b52373884aca65f35b263ae76a96fe8c2dd100e2353be1ade838e109b39f8f1e9cf676
-
SSDEEP
12288:nDuNS+GbkhoXwFHYycMht/ufUqFNr30/mXFXDii8ELtJTxXb:nDuN2wF4nM36k+Xein7Fr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac513c773a58ac1cd6c2dace38dd0c5a_JaffaCakes118
Files
-
ac513c773a58ac1cd6c2dace38dd0c5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
0918a568949c75f00d4838b62940d730
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
wininet
InternetGetConnectedState
urlmon
URLDownloadToFileA
comdlg32
GetOpenFileNameA
Sections
CODE Size: 557KB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE