Static task
static1
Behavioral task
behavioral1
Sample
03f5d07390112d5050e9a3ac0851151d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03f5d07390112d5050e9a3ac0851151d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03f5d07390112d5050e9a3ac0851151d_JaffaCakes118
-
Size
900KB
-
MD5
03f5d07390112d5050e9a3ac0851151d
-
SHA1
44b9229c04c04c953e727b6988fdf9ce051caee5
-
SHA256
b474b45ae8d814e6d6b1cdf6b259da54e88b2406681e69c72e43e4edd2052ebc
-
SHA512
50485064ec80374fdaac39aac54f70b473c74e30fd2f6745dd4507340f228d5f243cb0b50ec437aae0dd031584f24b3d1812f2ca12d9e9b8a8a350ae6538dc51
-
SSDEEP
24576:5kmEvrJ9/vq3fxEvWkFhVaRU6OQBbcb7nfv24pcL0L6KgDvl:5kDTJ9/rFhMRU6OQBQfuPL0GFv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f5d07390112d5050e9a3ac0851151d_JaffaCakes118
Files
-
03f5d07390112d5050e9a3ac0851151d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7339f7a8a56f4dda457fd032b97f41af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
wininet
InternetReadFile
shell32
Shell_NotifyIconA
comdlg32
GetOpenFileNameA
winmm
timeGetTime
Sections
.text Size: 868KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE