Static task
static1
Behavioral task
behavioral1
Sample
0c5a706e3886c9a73b4daf3d93172ff8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0c5a706e3886c9a73b4daf3d93172ff8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c5a706e3886c9a73b4daf3d93172ff8_JaffaCakes118
-
Size
44KB
-
MD5
0c5a706e3886c9a73b4daf3d93172ff8
-
SHA1
12ad33657e2ee7905071f931a40d5c82994030a8
-
SHA256
786a83e135643234094ff09db8a463b8f1720ff82d4c8c0afaf312b20ae4c34e
-
SHA512
6f6167fa785058fc7b544f780a82ba045709d1c1a54efdec3898f23d9aafdeecc94ffea97e152624bd864c1a0092ce2df11db2dc14a49ab27cd3a0c22f07be2e
-
SSDEEP
768:9kJDbWRVRuMlyqo7EDcqHhj2brPX4AC4y4mv+bS6txNN+U72Z1F:9gD5MlXo1qHhWrvBwvsSUZ+oy1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5a706e3886c9a73b4daf3d93172ff8_JaffaCakes118
Files
-
0c5a706e3886c9a73b4daf3d93172ff8_JaffaCakes118.exe windows:4 windows x86 arch:x86
41507753530d76bf751bd1509806ec8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
Sections
CODE Size: 36KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE