Static task
static1
Behavioral task
behavioral1
Sample
c8c2268f881183bf1c04bfe3fe3b15c6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8c2268f881183bf1c04bfe3fe3b15c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8c2268f881183bf1c04bfe3fe3b15c6_JaffaCakes118
-
Size
457KB
-
MD5
c8c2268f881183bf1c04bfe3fe3b15c6
-
SHA1
b05889f18102217f35aa53ff9656916291d5a967
-
SHA256
0f67d60fc825b8b07de5a6bbd143f72ac691c28f575631d90920a32f5558a173
-
SHA512
64cd2913a562929e95dc0e742fdabcdb9046880e3a4bfbf83bf2f32aed63ac313a0afaeb626eb48ad1a58caf6e7f30317ec79e31b3d9eb4882d252cb9e241e44
-
SSDEEP
6144:E2A/uLLA5LToklosPn2Vkj87eP4Zt5W3BRJn2VODCBAaEjL88C9BaG/gArrwiXHr:E2V6LTvx2Vk+KBiODraXBv/FXHr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8c2268f881183bf1c04bfe3fe3b15c6_JaffaCakes118
Files
-
c8c2268f881183bf1c04bfe3fe3b15c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2d4317d485a773542b0af916ef3f9b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
msimg32
GradientFill
gdi32
UnrealizeObject
version
VerQueryValueA
shell32
ShellExecuteExA
olepro32
OleLoadPicture
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
comdlg32
GetSaveFileNameW
Sections
.text Size: 390KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE