Static task
static1
Behavioral task
behavioral1
Sample
0aa1c9feee07adf3ac38b37398d616f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0aa1c9feee07adf3ac38b37398d616f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0aa1c9feee07adf3ac38b37398d616f7_JaffaCakes118
-
Size
42KB
-
MD5
0aa1c9feee07adf3ac38b37398d616f7
-
SHA1
36a621840b4c7eddce323a29837d34b2526326ac
-
SHA256
02e65f69b37f5c723b6ee6a4e6556bfc1af7772fb3f63c75deb4362225369581
-
SHA512
b04fbae4bbde64458dc3e8cd4f2349880c5963183fa42605c28b5a574b9074237d12ed24f08090ab5a3e3bbeb5fe987dc874038e5007cb95091d50b724a7e29e
-
SSDEEP
768:TUJcFhIkFtLpYHZpSIVH6YC4lG9t4MCiq26dsJaMyOhw4bkR6sPFoC4AthRlFJF7:YJsIkFtqSIVHIO2uMudsJF5h5u4AtvHb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aa1c9feee07adf3ac38b37398d616f7_JaffaCakes118
Files
-
0aa1c9feee07adf3ac38b37398d616f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
37f3cd05a4ed0aa309b2569719cfa873
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
wininet
InternetReadFile
Sections
CODE Size: 35KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE