Static task
static1
Behavioral task
behavioral1
Sample
d052ea6562f8fb71b16c80de28d401fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d052ea6562f8fb71b16c80de28d401fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d052ea6562f8fb71b16c80de28d401fb_JaffaCakes118
-
Size
1.0MB
-
MD5
d052ea6562f8fb71b16c80de28d401fb
-
SHA1
3610474b623eca8970a4ced8a9b4d9254e14cbcc
-
SHA256
9c509e4c7e6298fb5a79e68192097472ff2e01829d57d539152ee8fafc2e5a5f
-
SHA512
e158e1caf11901699713cae1977eab2ecdef0376ef59af8c0f405a758399db30e3a5df7f6cdfea82cc0fb8aadc72b11c8aa4be61de56d1839abd43079c00870a
-
SSDEEP
24576:BEzlsHecos6qDO7fYUbtKKc7o/gwBlIfSZHTzZp+vZDTrz3mzybm5ZGZ+Ek67MxX:yzlv1qDGfjbkqgclzRTNwdTzbmGZ+E1w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d052ea6562f8fb71b16c80de28d401fb_JaffaCakes118
Files
-
d052ea6562f8fb71b16c80de28d401fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
10d150fd1d06f520e13c92d18a649eb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
TlsSetValue
lstrlenW
user32
GetKeyboardType
CreateWindowExW
GetKeyboardState
advapi32
RegQueryValueExA
RegSetValueExW
oleaut32
SysFreeString
shlwapi
SHDeleteKeyW
SHDeleteValueW
shell32
SHGetPathFromIDListW
ShellExecuteW
urlmon
URLDownloadToCacheFileW
wininet
InternetCloseHandle
ntdll
NtUnmapViewOfSection
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
CODE Size: 39KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 982KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ