Static task
static1
Behavioral task
behavioral1
Sample
26eb8e80d6151fef5a27873ae632b6bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26eb8e80d6151fef5a27873ae632b6bf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26eb8e80d6151fef5a27873ae632b6bf_JaffaCakes118
-
Size
347KB
-
MD5
26eb8e80d6151fef5a27873ae632b6bf
-
SHA1
13d6a4583f0adab920d9b84869183ca6e624452e
-
SHA256
1ee0214c5bb66c86f157e16636609790db8280e64b8894e92c4d9134f6c39e64
-
SHA512
87184b0b98fb2d9c4d0cceb595fb555381040ebc166bb24d242608172773d05c337c9bbaf65ac40ec2d722bdfadd23b9f641cb8bc2b2a292f95d4ec53f9aeca6
-
SSDEEP
6144:LvHs31VBjMluDUrSkkoV7VphG07eLJJUbMq92JHYNa/zrGprew:LvMlVpDUrV3V7VpEqe1mJ8JHu+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26eb8e80d6151fef5a27873ae632b6bf_JaffaCakes118
Files
-
26eb8e80d6151fef5a27873ae632b6bf_JaffaCakes118.exe windows:5 windows x86 arch:x86
33c7038a9679e09a03932f501ea0177c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
GetWindowTextA
DialogBoxParamA
CopyIcon
CreateIcon
LoadMenuA
DialogBoxParamW
EndDialog
CopyRect
AppendMenuW
kernel32
ExitProcess
GetLastError
advapi32
RegDeleteKeyA
RegQueryValueExA
RegQueryValueW
RegOpenKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyW
RegFlushKey
Sections
.mnbj Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icoje Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajkpc Size: 306KB - Virtual size: 681KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dcod Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ