Static task
static1
Behavioral task
behavioral1
Sample
dafea033fafb3bb2411de753413e46e2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dafea033fafb3bb2411de753413e46e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dafea033fafb3bb2411de753413e46e2_JaffaCakes118
-
Size
293KB
-
MD5
dafea033fafb3bb2411de753413e46e2
-
SHA1
f595c831e2a0b9bbfd6ecab776712cc37bff80f2
-
SHA256
bd304fc18884aee35fee25718ad33a1f0332d76687b2527251e0d33065ad5f31
-
SHA512
a1dbf2e1980b5bdc34334c45267bbf718a84487d26e71204080cb1108054813f82ea5ccb8c0220d678169218b42e94e2bce7be6d60604eacc48dae404d17a798
-
SSDEEP
6144:1MnnmPvVlTC6HUqrFOlGP6MeX3IHKpfkBsU6ORJ+vDhle9U6:1Mn+vVlTCAJvNgQsm+Lr6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dafea033fafb3bb2411de753413e46e2_JaffaCakes118
Files
-
dafea033fafb3bb2411de753413e46e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf37b27f1e630061a1a370b39ea6c343
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
CODE Size: 273KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE