Static task
static1
Behavioral task
behavioral1
Sample
e18b9371a1d652577cc94138bfcda80e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e18b9371a1d652577cc94138bfcda80e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e18b9371a1d652577cc94138bfcda80e_JaffaCakes118
-
Size
156KB
-
MD5
e18b9371a1d652577cc94138bfcda80e
-
SHA1
f9e63e7c1d16ba3639ddd5dcd132f0603846e3d5
-
SHA256
6c38e231a7d798e39b50f8d0356ea26c9191ae1060507e1009d2f8c84f4f9239
-
SHA512
27813f64ba925666090a72a02ddb32821d92d624051299e88bf2fb58781e17cf4125ebe0b74c5b6b60e1544ae36b4df8f4b47fc6788efe37e11b64b8b21aed16
-
SSDEEP
3072:VHHIo1PWWpYZX6YyXV2hSHHgujgYj+aWuoFf/psLNQns+DQB5R:VI6uW6AZXV2h8Hg+gvruCnps75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e18b9371a1d652577cc94138bfcda80e_JaffaCakes118
Files
-
e18b9371a1d652577cc94138bfcda80e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b32844831978dc13c154c35504f0f1a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ws2_32
connect
wininet
InternetOpenUrlA
mpr
WNetAddConnection2A
oleaut32
GetErrorInfo
Sections
.text Size: 150KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE