Static task
static1
Behavioral task
behavioral1
Sample
e2298f946893ed6b1e6a4b4dd4b1c0e0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e2298f946893ed6b1e6a4b4dd4b1c0e0_JaffaCakes118
-
Size
366KB
-
MD5
e2298f946893ed6b1e6a4b4dd4b1c0e0
-
SHA1
f21205074d3a98c14b7ffd9f3d0cde965e1289fb
-
SHA256
79aa6d602975cb8612621f267d10f8bd58ec231b53c41201ec19efc04ada4de4
-
SHA512
e7d04138cab82d244771df7677673ba9b167123cb80e2d1ae3bc2856e6b288582bb6d8b3e5c1daae0ef7350e6efaac8be9979cbaef6ef2592fa8ef5b2bdfc7bd
-
SSDEEP
6144:AOWLA1fFeDza8e81bd2+tejOpaltnEvh4fy6Ue4kLj0YI7I2vQplSZkOiu9PZ/p:jWL8UzfpRtUOgEpwyJFkP0JfvvNVR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2298f946893ed6b1e6a4b4dd4b1c0e0_JaffaCakes118
Files
-
e2298f946893ed6b1e6a4b4dd4b1c0e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d58444c52e69ad829561010240f56cb3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
winmm
waveInUnprepareHeader
wsock32
__WSAFDIsSet
shell32
ShellExecuteExA
gdiplus
GdipGetImageEncoders
netapi32
Netbios
urlmon
URLDownloadToFileA
wininet
InternetOpenUrlA
comctl32
_TrackMouseEvent
shfolder
SHGetFolderPathA
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
msacm32
acmStreamUnprepareHeader
ws2_32
WSAIoctl
avicap32
capGetDriverDescriptionA
Sections
.text Size: 257KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE