Static task
static1
Behavioral task
behavioral1
Sample
dd7d312801542184eed9562e3b7741ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd7d312801542184eed9562e3b7741ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd7d312801542184eed9562e3b7741ae_JaffaCakes118
-
Size
170KB
-
MD5
dd7d312801542184eed9562e3b7741ae
-
SHA1
9f1d84da24548563c0c6b9954e28f916717aeeaf
-
SHA256
ce29cd35e1714b5a9c8566fa7311bea5cdafedcec900d1fe4d03592806cac3e8
-
SHA512
9cb8ab4a7d5c384322eda0df7638bb3215b4347f8ef514563bf05aceedb4d8ef7290a00044f610901db2d87055b13295b88d2f312b1d71774cf330d9387a87c7
-
SSDEEP
3072:U2ZRjtKpeWBULh9HpARDK/RgFXtis6jmb/46sYFGnQ4Nkjtv6uEZXom6ksYgBcKG:UeHcesUtXsc0tn6k/UvItv6uE36EAG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd7d312801542184eed9562e3b7741ae_JaffaCakes118
Files
-
dd7d312801542184eed9562e3b7741ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 130KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE