Static task
static1
Behavioral task
behavioral1
Sample
406badf6e8ce55196ed65a09d1e51896_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
406badf6e8ce55196ed65a09d1e51896_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
406badf6e8ce55196ed65a09d1e51896_JaffaCakes118
-
Size
163KB
-
MD5
406badf6e8ce55196ed65a09d1e51896
-
SHA1
32ebd0efd4452d95d482f3c3d8060bd8a092ebff
-
SHA256
d474415bb20c0b687e464aa340682fc59c953c10c7cfbdbd404f604248b351f1
-
SHA512
101cc70f315f34f0062c948b0a9dc422da222f7519768c27deefcd809329836ab599d02c3813811ac8f663233ea539e80b48c09c333d832896ba0efcdb0a6b63
-
SSDEEP
3072:0pbWdfg2QggiXqsbg43YnmOjhBlrQTyd3hiBY2aR1AYiGb0wNRrx7EZR7:aWdBgiXqssmUqGniB065Gb0wNR2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 406badf6e8ce55196ed65a09d1e51896_JaffaCakes118
Files
-
406badf6e8ce55196ed65a09d1e51896_JaffaCakes118.exe windows:5 windows x86 arch:x86
b29d9179ca8a45f909f9b498a358705a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
msimg32
AlphaBlend
gdi32
SetTextColor
version
VerQueryValueW
wininet
InternetReadFile
comdlg32
GetSaveFileNameW
crypt32
CryptBinaryToStringW
ntdll
NtShutdownSystem
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
comctl32
InitCommonControls
Sections
.text Size: 152KB - Virtual size: 816KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ