Static task
static1
Behavioral task
behavioral1
Sample
025f2f12e0ac13dd75199c8afdc4bdf1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
025f2f12e0ac13dd75199c8afdc4bdf1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
025f2f12e0ac13dd75199c8afdc4bdf1_JaffaCakes118
-
Size
529KB
-
MD5
025f2f12e0ac13dd75199c8afdc4bdf1
-
SHA1
8a3cdb76492ae7638a4a5cbf728874d968db37f5
-
SHA256
e1d5cb4423792d43cdf13dd8a82e2facf55f927f8dd5d6acc488373ab942db34
-
SHA512
df3778c1e882ac397c9514219521470a8d116afa9afd3a00bd695c43f4d9cab92e69334d8eef3427dfd71032ca41f1c70648bd2e127cad6ee9b4b816bc8c2897
-
SSDEEP
6144:s6rv3F/Da63zFgeMVrN3es7n+qAEjdqRZVel+QDALq1tkWD5QhUU/ncNT/n16b:Nx/9zFgXN3ln5AAdcaNkq3CwTw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 025f2f12e0ac13dd75199c8afdc4bdf1_JaffaCakes118
Files
-
025f2f12e0ac13dd75199c8afdc4bdf1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9386adf84f80212d2b2e19af3b77641
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
urlmon
URLDownloadToFileA
comdlg32
GetOpenFileNameA
Sections
CODE Size: 493KB - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE