Static task
static1
Behavioral task
behavioral1
Sample
f6431e960409580dafdcd94603d3631f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6431e960409580dafdcd94603d3631f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6431e960409580dafdcd94603d3631f_JaffaCakes118
-
Size
308KB
-
MD5
f6431e960409580dafdcd94603d3631f
-
SHA1
4ecdca0b116c05bf9455008cc65f2eb6f92e763e
-
SHA256
257daf9160fe9347750cdd841150ee734061e2377a9d6d326b6e711f2fb97b66
-
SHA512
d554153a8bac06a5970064bb02e6ba2cc3e87a7be8bd69cf3371e2faa13941f7714c573c810995ab93664638250b9d46ffc4320c8be18b921dc835fb3c94d312
-
SSDEEP
6144:4GtCJ2JaY3rwKeaQ/6eJyaov9xSdyeHZ5dTZoU:4KCJ2Jx3r2aQabv9Mdye5zTZoU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6431e960409580dafdcd94603d3631f_JaffaCakes118
Files
-
f6431e960409580dafdcd94603d3631f_JaffaCakes118.exe windows:4 windows x86 arch:x86
e242e87dc0618e0334a51707c793a34b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
OpenClipboard
gdi32
SetStretchBltMode
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
LoadTypeLi
comctl32
ImageList_Destroy
ws2_32
accept
comdlg32
GetFileTitleA
Sections
.text Size: 300KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE