Static task
static1
Behavioral task
behavioral1
Sample
b91df8fbd0842491703494e3ea648cc5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b91df8fbd0842491703494e3ea648cc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b91df8fbd0842491703494e3ea648cc5_JaffaCakes118
-
Size
286KB
-
MD5
b91df8fbd0842491703494e3ea648cc5
-
SHA1
74218ad046c288e10b98eb73ea82a1eacd7cbdd4
-
SHA256
a2f89b361ab4368dfff8cf3c0549f8442634e6a0b79b64a78c946c4e48bea1d6
-
SHA512
2e69adc121b46063b47361c7a673bfcbfabf2c4b37d6ffd880e4d98df5624b7c55d4c00e9f4bb83b279e64083bcc6e6ceb3da18d37ce5f8d065636ed8fa79f0d
-
SSDEEP
6144:og1Omnb2ejB/7oTsjW6rN0Ubg67IlQOPscRueRnqn7:l3VBEAjWseTRnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b91df8fbd0842491703494e3ea648cc5_JaffaCakes118
Files
-
b91df8fbd0842491703494e3ea648cc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7b997bc00288f3e27837a7f98660adc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
GetSystemTimeAsFileTime
GlobalFindAtomW
GetTickCount
GetStartupInfoA
GetLocaleInfoW
UnhandledExceptionFilter
VirtualProtect
InterlockedExchange
SetUnhandledExceptionFilter
GetCurrentThreadId
InterlockedCompareExchange
IsDebuggerPresent
GetModuleHandleW
EnumResourceLanguagesA
GetCurrentProcess
GetCurrentProcessId
GetPrivateProfileSectionW
TerminateProcess
LocalAlloc
FoldStringW
QueryPerformanceCounter
GetProcessHeap
DeleteFileW
oleacc
CreateStdAccessibleObject
shlwapi
GetAcceptLanguagesA
PathFindExtensionW
PathCreateFromUrlW
UrlCreateFromPathW
PathAppendW
UrlUnescapeW
PathRemoveFileSpecW
StrCmpIW
PathIsRelativeW
PathCombineW
Sections
.text Size: 145KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ