Static task
static1
Behavioral task
behavioral1
Sample
15c605e1241de3073c9dc251aebeba7e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15c605e1241de3073c9dc251aebeba7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15c605e1241de3073c9dc251aebeba7e_JaffaCakes118
-
Size
135KB
-
MD5
15c605e1241de3073c9dc251aebeba7e
-
SHA1
1a51d8499e564858aab4a2eea7c9aa64c639baea
-
SHA256
df5d2d488e7ad3cdf0c658004ffd2dd0f3e45af4ace79ba12b250ba0d78f1fa7
-
SHA512
69c1309d40feb5e8b45b512db6f690b194688dd7bb3b3af3d8948d215e4c91e983a3515ce697a4173d9f2504a35431f7a333ad1150d0c5875cb351acc1072238
-
SSDEEP
3072:8mxoaDhB51IyroJTlmSjtMDoMNcpQqqggXGLCOGkGWvi2sq55mMG9:8OFeygTlmSjtllqvQi05mMg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c605e1241de3073c9dc251aebeba7e_JaffaCakes118
Files
-
15c605e1241de3073c9dc251aebeba7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2a8bb895b3cc0ec332a0ba9ca20b47b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
MessageBoxA
kernel32
GetACP
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
netapi32
Netbios
wininet
InternetReadFile
ntdll
ZwDuplicateObject
Sections
.text Size: - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 18KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Safe0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Safe1 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ