Static task
static1
Behavioral task
behavioral1
Sample
cf7098fba6e7a7ae061dd177a73035c5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf7098fba6e7a7ae061dd177a73035c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf7098fba6e7a7ae061dd177a73035c5_JaffaCakes118
-
Size
34KB
-
MD5
cf7098fba6e7a7ae061dd177a73035c5
-
SHA1
c7d64b27b1fa65a04e51ffd1e31efb5271b66751
-
SHA256
5507adc9811bf0b7d49e916ee8f23cdff062f1b17d90868cc17e5cd4714ea11b
-
SHA512
6a8f15b59204693d4427d35b65d75515a59fa54ab0caf38ed8975e478dd0790b21dc613bdd87b4681cd92dcf0eefe744a0593fc433cca7843df532e455bb72b3
-
SSDEEP
384:eYOB9X1OJsV0jjCFwv/qjeJiigFzvF54BSkkiZeJJvbjE42JSlwcyxv1XP1WlnCs:ePZOv//o54GJdg47wcuACXju42kQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf7098fba6e7a7ae061dd177a73035c5_JaffaCakes118
Files
-
cf7098fba6e7a7ae061dd177a73035c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
005dfcdb1e521822d4093f6d199f2f7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SendMessageA
gdi32
SetBkMode
advapi32
RegCloseKey
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE