Static task
static1
Behavioral task
behavioral1
Sample
25221af8e191238c0bde9d560ecfce82_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25221af8e191238c0bde9d560ecfce82_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25221af8e191238c0bde9d560ecfce82_JaffaCakes118
-
Size
269KB
-
MD5
25221af8e191238c0bde9d560ecfce82
-
SHA1
e5c3126a7056fcb7fa0db69a3d61097c89f7394f
-
SHA256
2b6d69db26ef088ff77df135b932cb57927ed5a678dcab98c66195ed6569dec6
-
SHA512
b2a89f8027aafda1b2bd8384ffa3669bc27c59ba090d2d47bdbe40c2d283cfbd1b66a122d3d6a36ccf02ed1a7b8ecda20a3be8b80ab8c994d446b5323584ceec
-
SSDEEP
6144:lTqzSRxJVSaTulZLYJy39JqxsBHwZj2IfqE+:l2oE1aKJqxCQZj2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25221af8e191238c0bde9d560ecfce82_JaffaCakes118
Files
-
25221af8e191238c0bde9d560ecfce82_JaffaCakes118.exe windows:4 windows x86 arch:x86
acacf4d2a9705959b94082fe44acfbf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
comctl32
ImageList_Add
gdi32
BitBlt
oleaut32
SafeArrayCreate
user32
ActivateKeyboardLayout
Sections
.text Size: 207KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE