Static task
static1
Behavioral task
behavioral1
Sample
155cb220b644290547a744e24054d3e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
155cb220b644290547a744e24054d3e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
155cb220b644290547a744e24054d3e4_JaffaCakes118
-
Size
164KB
-
MD5
155cb220b644290547a744e24054d3e4
-
SHA1
4d0219eeab7c4c964fed366a56c21c846604f9f0
-
SHA256
411a32c6504a232605b1746e1a3781e0a3d4dd994ba28483cae3f1519d822d3f
-
SHA512
713eea2549d7dd0adc9455ffc8f8d50d23782fc5cee66efe3a03a2e94336cc7a040759adbadd9659096aa2c7417724a6ce4cc1b5dfd1e7097902c141c4c12333
-
SSDEEP
3072:jnHF3gTCFSbYv4ve/OMd9Vjej+3qubRJPX+iDNpzA8TY65JmufH4wWsRANv3KFE:jnOTq5NZexuvXNNWamiHJWbNvKF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155cb220b644290547a744e24054d3e4_JaffaCakes118
Files
-
155cb220b644290547a744e24054d3e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7dac0db97cab45ac54f4225a94fe814
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GlobalGetAtomNameA
LoadResource
MultiByteToWideChar
LockResource
GetModuleFileNameW
FindClose
GlobalSize
GetPrivateProfileStringW
GetVersionExW
LoadLibraryW
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
GetPrivateProfileIntW
EnumResourceTypesA
WritePrivateProfileStringW
GetDllDirectoryW
MulDiv
FreeLibrary
GetVersionExA
DeleteCriticalSection
GetTickCount
FindFirstFileW
LoadLibraryA
lstrlenW
GetLocaleInfoW
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
shell32
DllGetVersion
SHGetFolderPathW
ShellExecuteExA
SHBrowseForFolderA
SHFileOperationW
SHGetPathFromIDListA
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
SHGetFileInfoA
Shell_NotifyIconA
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ