Static task
static1
Behavioral task
behavioral1
Sample
ddb464d9f817fde0ea1f44c7c2c63661_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddb464d9f817fde0ea1f44c7c2c63661_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddb464d9f817fde0ea1f44c7c2c63661_JaffaCakes118
-
Size
236KB
-
MD5
ddb464d9f817fde0ea1f44c7c2c63661
-
SHA1
f0a065fa0e17fa3c16d9ed5b4b5c328b74d59bca
-
SHA256
45e8942606a41e772dfd63fdbbfcf3ec381be8b6f86cfb7d6e023b394f594cd4
-
SHA512
49f4c24a58169d1d6c4a8e15bb5f47ebb3e02fdbe4bb5dbc886d443a6d6594b94a688fbba6f784bee2ab2cebc5452dace548b332ec7faccea3572e79022d1b99
-
SSDEEP
6144:ofHapPeTmOCM5GDlORQfItwOhf+cbq2OriqA:oiZeT7Zg5IRtTf+J2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb464d9f817fde0ea1f44c7c2c63661_JaffaCakes118
Files
-
ddb464d9f817fde0ea1f44c7c2c63661_JaffaCakes118.exe windows:4 windows x86 arch:x86
04f65b42a376c63ba2f9e1d0008d3f08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
iphlpapi
SetIfEntry
Sections
CODE Size: 189KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rorg Size: 36KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE