Static task
static1
Behavioral task
behavioral1
Sample
b1d24415b2ff19887df89b4dd58bb62c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1d24415b2ff19887df89b4dd58bb62c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1d24415b2ff19887df89b4dd58bb62c_JaffaCakes118
-
Size
80KB
-
MD5
b1d24415b2ff19887df89b4dd58bb62c
-
SHA1
36be9f7c4afbf39d7f588e47e2bb7a27b226ae31
-
SHA256
04429abd5c32ac78a8d55413c53b33c0928fc73b9e79a895f33dc95b24c05a65
-
SHA512
f72d84c04aed9a0e252dad38ccf8805bf887b1426b18634f980b14f1c42ae5296be2186000fec0bd4c5cb70e82b46f8ab83c5e569f23037930d6c09f4dc2e1ea
-
SSDEEP
1536:VgtVthw5cOz/q1R2QQSAvT7agbbRacvjXdf6V0nR1BPfGVCkb+aHUja3C/Z1q:VgtVbscOOR2Wu5jvhf6V0nXhKgatC/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1d24415b2ff19887df89b4dd58bb62c_JaffaCakes118
Files
-
b1d24415b2ff19887df89b4dd58bb62c_JaffaCakes118.exe windows:4 windows x86 arch:x86
935fca4d18d739f0316205d6b9e8907e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteExA
wsock32
WSACleanup
netapi32
Netbios
Sections
CODE Size: 75KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE