Static task
static1
Behavioral task
behavioral1
Sample
b3eb3ce642070919dee9c2bb6b5521d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3eb3ce642070919dee9c2bb6b5521d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3eb3ce642070919dee9c2bb6b5521d5_JaffaCakes118
-
Size
379KB
-
MD5
b3eb3ce642070919dee9c2bb6b5521d5
-
SHA1
ec9c5f2f991fea356535708a57ce798972cfb615
-
SHA256
0bd3f33008835117b9240907c031f89c015d34fa51bae0c4f02eaab7f7095486
-
SHA512
065f38a2fbd7f471bf6074216767ab836e6189232e0426db558213da3d947acf5998d05b7e027f71fd97691827bc0fb10e843b15f4e7d4ee28523d65f0545c71
-
SSDEEP
6144:EdWjqGrUigLaeJW5ZgsPTTHCIneM6CDGlXI7xsyPcssKWc1oA7iGt/AS:Ed5GrUDeeonTiIeADGlY+3s5WYbD/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3eb3ce642070919dee9c2bb6b5521d5_JaffaCakes118
Files
-
b3eb3ce642070919dee9c2bb6b5521d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
beb78b6c549c55f8f74ca5bed790ec3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
urlmon
CoInternetCreateZoneManager
wininet
InternetSetOptionA
Sections
.text Size: 355KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE