Static task
static1
Behavioral task
behavioral1
Sample
ef1e659e22e8147ef15fc5b851ebd03c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ef1e659e22e8147ef15fc5b851ebd03c_JaffaCakes118
-
Size
869KB
-
MD5
ef1e659e22e8147ef15fc5b851ebd03c
-
SHA1
76ac0d2c0787f4eb5e8fffa6452fc12857bedfd6
-
SHA256
6ceb8dd5737410e136266d3b147d9788185fc92287c00fddf153cabb38153bd4
-
SHA512
99058a69816d8a34a86c3e6d75cbc4f2a1b53864cff0619d5d43aedf372f2c2409a5accc107c47364c2c47873414da0d1d012f7d22b9eaf8f694c38dc9797ab7
-
SSDEEP
24576:zxvAY8EOc+dQUUsKPnqx2rjhZp7rnyUjdMerc9:zxvBOct+K/LXnp77yUjdBO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef1e659e22e8147ef15fc5b851ebd03c_JaffaCakes118
Files
-
ef1e659e22e8147ef15fc5b851ebd03c_JaffaCakes118.exe windows:4 windows x86 arch:x86
c03cec1c5cc0ca494238c0ebe8ad4120
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetDlgItemTextA
gdi32
ExtTextOutA
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegEnumKeyA
shell32
Shell_NotifyIconA
comctl32
ImageList_AddMasked
shlwapi
PathAddBackslashA
oledlg
ord8
ole32
CoTaskMemAlloc
oleaut32
SystemTimeToVariantTime
urlmon
ObtainUserAgentString
dbghelp
ImageDirectoryEntryToData
wininet
InternetQueryOptionA
rpcrt4
UuidCreate
iphlpapi
GetAdaptersInfo
version
VerQueryValueA
Sections
.text Size: 827KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE