Static task
static1
Behavioral task
behavioral1
Sample
07afe89e10969df6fbcc9e8c43da7e15_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
07afe89e10969df6fbcc9e8c43da7e15_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07afe89e10969df6fbcc9e8c43da7e15_JaffaCakes118
-
Size
702KB
-
MD5
07afe89e10969df6fbcc9e8c43da7e15
-
SHA1
0ccf877eedf13b933b68976a5c93e29339b9bb59
-
SHA256
11bf7d24e4832ccfc67fe71eec36f878870c53bad81a358b1429504b6d38e263
-
SHA512
8c47564a44b8ccc7c2c62cae0aa2646242c9da375a7b06ec5725ea6bfe414b80f74e0f3a0856988e657fe6c1847bf24ed03c24102da4241c875cb9e0b2b416eb
-
SSDEEP
12288:JKuGSoI4E17LOWpbmaTiauOzkqy35GI9DcmjqutIeomK1jnvduWo+iCp/T:JxG1QOWMqDw5NDcIqutI7vjlW+17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07afe89e10969df6fbcc9e8c43da7e15_JaffaCakes118
Files
-
07afe89e10969df6fbcc9e8c43da7e15_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9386adf84f80212d2b2e19af3b77641
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
urlmon
URLDownloadToFileA
comdlg32
GetOpenFileNameA
Sections
CODE Size: 667KB - Virtual size: 14.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE