Static task
static1
Behavioral task
behavioral1
Sample
c0de2132b437d1228bac06968d15273d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c0de2132b437d1228bac06968d15273d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0de2132b437d1228bac06968d15273d_JaffaCakes118
-
Size
70KB
-
MD5
c0de2132b437d1228bac06968d15273d
-
SHA1
58617e907a56d5c7709927348e10ef87821835d7
-
SHA256
84a7b5bc0070b8b192a84e948fc76991032ab6df5abc355203ead6021b996fa3
-
SHA512
d24bdefd098c5af8199ccef80663be170d09b6608762064bb9c8497422ca376b1aaee6f595d9d596f1fb25cb63e19ee5bc28d66c226f60fb5befdce7e138dd16
-
SSDEEP
1536:AVy3jzVFTTGGBzq4wcm5NTRtLtNDWvFVx19y03cU3q65T8T2RHD7vea2:hfvGn4wlTRdDWJ1Pw65ZfvF2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0de2132b437d1228bac06968d15273d_JaffaCakes118
Files
-
c0de2132b437d1228bac06968d15273d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b4d5db0b5e0ee9036462d7f3a19091f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
select
dnsapi
DnsQuery_A
wininet
InternetOpenA
user32
GetCursorPos
advapi32
RegCloseKey
Sections
.h7j Size: - Virtual size: 168KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h7j Size: 69KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE