Static task
static1
Behavioral task
behavioral1
Sample
db229807ed7594b224608bcf5965f925_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db229807ed7594b224608bcf5965f925_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db229807ed7594b224608bcf5965f925_JaffaCakes118
-
Size
233KB
-
MD5
db229807ed7594b224608bcf5965f925
-
SHA1
0f1242651c1a652163f5bcf7e2d0be29462b247a
-
SHA256
0080daac7f9ac19754a89e1fc4e4c46663d8e5a4a4e9bd07c8a00d246f6f4106
-
SHA512
18a583b2580b283a0096188d350467869a39d9d3934fb62c156fc1e90bb02fa37788807292528015742fd3f61efc9f446bea4b57077f81a983eac9bc29dd7e22
-
SSDEEP
6144:NvX6i+5NumaJpwLjRgM5A9Q7CwiTCb0BO0YC1ZXM:NvX6iyNgz8eM69Qn+wNVC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db229807ed7594b224608bcf5965f925_JaffaCakes118
Files
-
db229807ed7594b224608bcf5965f925_JaffaCakes118.exe windows:4 windows x86 arch:x86
c55d58516ab8b94df1945dd02ca3b318
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
CODE Size: 221KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE