Static task
static1
Behavioral task
behavioral1
Sample
f560e1678dc790aaad48c4e867f5761c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f560e1678dc790aaad48c4e867f5761c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f560e1678dc790aaad48c4e867f5761c_JaffaCakes118
-
Size
1.3MB
-
MD5
f560e1678dc790aaad48c4e867f5761c
-
SHA1
fb5de6af82ae91ab70ef59af0421f9cc2ed60237
-
SHA256
c824feca55818dbfea829f40dd4b56583a6fd13dbbf04eae56ceef49ea3c96b6
-
SHA512
fe7df1067ff2431bd4e0741e229ad64d76a401a717458e645358c9db9dd39e5e46fdb41221c5c43b7f2905d393a86c16ec3e9578d0b4d173dd6aa2ad8bf041c0
-
SSDEEP
24576:3g5pnpTHNOFIfO6sNVs1kZhr4WpzPhc1NC+QwMQGzIc5JXQBTXxN/NdX9R0:Mn0p6gVuwhr4WpIQmGzIPBTHztR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f560e1678dc790aaad48c4e867f5761c_JaffaCakes118
Files
-
f560e1678dc790aaad48c4e867f5761c_JaffaCakes118.exe windows:4 windows x86 arch:x86
530833577b0dd943540d06d6e801c13c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
wininet
FindNextUrlCacheEntryA
Sections
CODE Size: 1.3MB - Virtual size: 18.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE