Static task
static1
Behavioral task
behavioral1
Sample
d26967323e8dd3d37f5039ba4cb9e50c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d26967323e8dd3d37f5039ba4cb9e50c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d26967323e8dd3d37f5039ba4cb9e50c_JaffaCakes118
-
Size
286KB
-
MD5
d26967323e8dd3d37f5039ba4cb9e50c
-
SHA1
b3514670a7bb6a3fb44ef6eb6bb06350c28d93c9
-
SHA256
f1c325b581f90e58d2bd957656a8b617c1be034a4f8e2e5b846fea811d947d0a
-
SHA512
35021c91afb53f196249c6bbdac3c018bca8f46bf9904ed82a1ad0827bb2bcce6714b6e3dcf7e73ce3a644d1f339586bf8aa49d77e13eb34db1baed932df2f18
-
SSDEEP
3072:gYWWiQnUdGA5IP+XwS78yyU7BU+Y6bW0ULcVTsnoK4cGP3CbqHmtZVl2lK2jCgae:J1iQbvYwS71Y6bWLcNsn/mAVl+/iKd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d26967323e8dd3d37f5039ba4cb9e50c_JaffaCakes118
Files
-
d26967323e8dd3d37f5039ba4cb9e50c_JaffaCakes118.exe windows:1 windows x86 arch:x86
c55e705b0400db6eedfd76478369a7c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
wininet
InternetGetConnectedState
winspool.drv
OpenPrinterA
wsock32
WSACleanup
winmm
timeGetTime
Sections
CODE Size: 277KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE