Static task
static1
Behavioral task
behavioral1
Sample
d0d455f23dda24ff80c31ea2b4c40297_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0d455f23dda24ff80c31ea2b4c40297_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0d455f23dda24ff80c31ea2b4c40297_JaffaCakes118
-
Size
865KB
-
MD5
d0d455f23dda24ff80c31ea2b4c40297
-
SHA1
99dd8c57c163f4fa26b7ba2b5f8f63b4865038b0
-
SHA256
975051c8a0f34eefbf7b4ee856acefd141b0473e6b7882e957a30ad65e1021e5
-
SHA512
5b5ffee4371ecc8db1275ab26947a07bbf7ed0efe22139a96255a6762717162feecc4b7b6e31c84cd085b0e34a6874c46f5c2b4feac465616e51b94945d476e1
-
SSDEEP
24576:JfEnJ0JA3oIUjuuTwmRzdO6g3lWqAcP4:+JJ3auYwQzdOb3lNAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d455f23dda24ff80c31ea2b4c40297_JaffaCakes118
Files
-
d0d455f23dda24ff80c31ea2b4c40297_JaffaCakes118.exe windows:5 windows x86 arch:x86
5de4b018558ddbd5c721f47ac0a3030f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
avutil
ord33
avcodec
ord671
avformat
ord31
swscale
ord66
user32
ClipCursor
gdi32
GetEnhMetaFilePaletteEntries
comdlg32
GetSaveFileNameW
advapi32
RegOpenKeyExA
shell32
SHGetPathFromIDListW
ole32
StringFromGUID2
oleaut32
SysStringLen
winmm
mmioAscend
shlwapi
PathIsSystemFolderW
comctl32
ord17
msimg32
GradientFill
wmvcore
WMCreateEditor
msvfw32
ord2
avifil32
AVIFileExit
msacm32
acmFormatSuggest
psapi
GetModuleFileNameExW
imagehlp
MapFileAndCheckSumW
msvcr90
fscanf
ws2_32
ntohl
Sections
.text Size: 812KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE