Static task
static1
Behavioral task
behavioral1
Sample
0e5b886179cdccf752b1f849e9a48597_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0e5b886179cdccf752b1f849e9a48597_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e5b886179cdccf752b1f849e9a48597_JaffaCakes118
-
Size
209KB
-
MD5
0e5b886179cdccf752b1f849e9a48597
-
SHA1
1c8cc2bf17a3946e69512647915ad47eb10ea6e7
-
SHA256
e2ec36029ba334e1c4ba72d0e61c4849a7449a2da3ea8e6fa9613905632c1ac6
-
SHA512
288c9aacab91e5c4f658e75f8a6362367646da78f99190dd32ced40d4d5f000ea54045a013b54a4ca75e820a2b0ce16459a7fab65cebf87b3c30671ea99c23a3
-
SSDEEP
6144:u5DVL3xqzgrWvFpPLhhEElmyGTgCUp3AAJsM/:u5pBcprZFGTgCg3hsM/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e5b886179cdccf752b1f849e9a48597_JaffaCakes118
Files
-
0e5b886179cdccf752b1f849e9a48597_JaffaCakes118.exe windows:4 windows x86 arch:x86
c55d58516ab8b94df1945dd02ca3b318
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
CODE Size: 196KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE