Static task
static1
Behavioral task
behavioral1
Sample
265f309d69e7d26e92efdfac2ee84962_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
265f309d69e7d26e92efdfac2ee84962_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
265f309d69e7d26e92efdfac2ee84962_JaffaCakes118
-
Size
784KB
-
MD5
265f309d69e7d26e92efdfac2ee84962
-
SHA1
7514cb7453691051e3ae39f675bd5486be2dbffd
-
SHA256
a21eaee0a1000a3321653560503a29118459359f783a909fd7c5b6f9e0bb053c
-
SHA512
f03409a85f6aeaec61c25afdfde84b4231e797b0733b510c849f299ff9655847c7f7fac0b17e33e45e88c1948f649344ddbf59424ddf8124d252a635df5151af
-
SSDEEP
12288:AmHRrS41CS0fCjhGVC7z/ulSJlpf87ZFyPLX1IqDv7VQc:vxrk/f8hDewpWFyPLlxV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 265f309d69e7d26e92efdfac2ee84962_JaffaCakes118
Files
-
265f309d69e7d26e92efdfac2ee84962_JaffaCakes118.exe windows:4 windows x86 arch:x86
e96ac3001243b508d1db3690aa545bc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ord128
ord580
ord151
ord537
ord882
ord879
ord591
ord587
ord469
ord661
ord478
ord319
ord541
ord545
ord887
ord899
ord616
ord951
ord948
ord582
ord464
ord431
ord409
ord375
ord373
ord364
ord266
ord241
ord209
ord205
ord183
ord184
ord109
ord912
ord860
ord712
ord666
ord433
ord851
ord850
ord587
ord375
ord945
ord912
ord895
ord887
ord879
ord835
ord834
ord817
ord778
ord773
ord772
ord769
ord707
ord704
ord679
ord616
ord615
ord600
ord586
ord581
ord580
ord552
ord537
ord512
ord508
ord504
ord505
ord501
ord497
ord496
ord494
ord492
ord479
ord478
ord472
ord469
ord464
ord460
ord458
ord444
ord435
ord433
ord409
ord375
ord373
ord364
ord363
ord361
ord354
ord348
ord340
ord326
ord320
ord319
ord317
ord254
ord247
ord243
ord545
ord542
ord541
ord241
ord236
ord224
ord209
ord205
ord195
ord194
ord152
ord151
ord130
ord128
ord109
ord80
ord76
ord64
ord56
ord50
user32
ord296
ord457
ord477
ord43
advapi32
ord495
ord485
ord459
ord508
ord495
ord485
ord478
ord463
ord459
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
version
ord11
ord2
ord1
gdi32
ord596
ord587
ord581
ord579
ord577
ord574
ord570
ord567
ord563
ord548
ord544
ord539
ord536
ord535
ord529
ord528
ord526
ord521
ord515
ord514
ord504
ord503
ord501
ord496
ord495
ord482
ord479
ord467
ord464
ord463
ord457
ord453
ord451
ord450
ord446
ord440
ord438
ord427
ord423
ord414
ord412
ord407
ord375
ord374
ord371
ord365
ord364
ord363
ord361
ord359
ord358
ord354
ord338
ord332
ord284
ord218
ord216
ord144
ord142
ord141
ord81
ord76
ord73
ord72
ord70
ord64
ord59
ord52
ord51
ord46
ord45
ord42
ord40
ord36
ord34
ord19
comctl32
ord79
ord59
ord82
ord67
ord56
ord49
ord76
ord48
ord47
ord46
ord54
ord42
ord63
ord68
ord51
ord50
ord55
ord75
ord70
ord39
ord60
ord45
ord44
Sections
CODE Size: 618KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 51B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE