Static task
static1
Behavioral task
behavioral1
Sample
135bf5894ea478671466c17f5b0c7bfd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
135bf5894ea478671466c17f5b0c7bfd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
135bf5894ea478671466c17f5b0c7bfd_JaffaCakes118
-
Size
21KB
-
MD5
135bf5894ea478671466c17f5b0c7bfd
-
SHA1
47b0d787269aab78d6de01658eccb9a9844bb135
-
SHA256
eab857f13601ac304638ada3d83f3f009e64d4ec3ebd2565567767a4fbf092d4
-
SHA512
3d59c470873e2ec81600b0e16fde69b0b56db5bad7cedb3ba8986778e709eac5304ce05b7740e8f0b9e3e21f94ba4b1476329fa17409cb3198e2aaa6501a3085
-
SSDEEP
384:7fdWdPawucAdiLPF7WP3pwl1dPsIW7CAYR17FiY3XgQRQPIMwP:pCPxucAdKgP5wqnCDv74UXgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 135bf5894ea478671466c17f5b0c7bfd_JaffaCakes118
Files
-
135bf5894ea478671466c17f5b0c7bfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
fac4641ae6598cd4759bc67e15f429d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowTextA
advapi32
RegDeleteKeyA
shell32
ShellExecuteA
ole32
CoInitialize
oleaut32
SysAllocString
wininet
InternetGetConnectedState
Sections
.text Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE