Static task
static1
Behavioral task
behavioral1
Sample
d6938e28b689bd217526b413cbc1af8f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6938e28b689bd217526b413cbc1af8f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6938e28b689bd217526b413cbc1af8f_JaffaCakes118
-
Size
750KB
-
MD5
d6938e28b689bd217526b413cbc1af8f
-
SHA1
3b025e8a9bdc6302bd829154a964cc4939b299a6
-
SHA256
d94bfc644468e860fc1f6557eddff17497d2e5221af90e33473be34d68a9c625
-
SHA512
6cd6ef2024dfcf1f2fa0d73e16626fe9091ca0fbb27606c50d9050a660b0bfe065c749f27c9d1cc16f03d82c03d7584d3c992dd63bea806618b55130e5e38b11
-
SSDEEP
12288:hFdkioZXDJc9lVxYKY+DrDNSFC0N4REcQUnn8Lq6iiqBw3sDKkfgKWWX1f:h3kiotDJc9Ow/8Su8nn36vXufgKJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6938e28b689bd217526b413cbc1af8f_JaffaCakes118
Files
-
d6938e28b689bd217526b413cbc1af8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ef6c7d1d26a9b5471e1b0af2b2b79bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
CreateErrorInfo
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
Sections
.text Size: 30KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE