ogdtxkiyo
Static task
static1
Behavioral task
behavioral1
Sample
14e375133d0c4687eb601680e2e0d350_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14e375133d0c4687eb601680e2e0d350_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14e375133d0c4687eb601680e2e0d350_JaffaCakes118
-
Size
416KB
-
MD5
14e375133d0c4687eb601680e2e0d350
-
SHA1
b821f22c14ca5b88b67480ddef2f5f5534bf9a3d
-
SHA256
ed4f6e19e21580dddbce5354dbaa3436de2ca474aed9b7e58e8c028780897e7c
-
SHA512
d2aa994f090d108f7690d431becae4c8095dcc59127b730886e12170331b5ccf725f1a3f7c43d13b02faf0cde8e692c3e464e43e01be64a2c749b1c59f545d8c
-
SSDEEP
6144:oPW3Y/+Snjs2IS0hsuu3rGjbIjZuAQIidAjINaiUj5rwbucT3M42qwFwOmD38:oe3yA2P0OuRjctxz7iwmv69wOw3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e375133d0c4687eb601680e2e0d350_JaffaCakes118
Files
-
14e375133d0c4687eb601680e2e0d350_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a3d47edeeb62d8e177bae6a42924e37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlEscapeA
kernel32
SetLastError
SetErrorMode
msvcrt
malloc
free
winmm
auxGetVolume
Exports
Exports
Sections
.code Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 426B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 360KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ