Static task
static1
Behavioral task
behavioral1
Sample
f5dd565288e19c6125f15ed05a46f43f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f5dd565288e19c6125f15ed05a46f43f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5dd565288e19c6125f15ed05a46f43f_JaffaCakes118
-
Size
254KB
-
MD5
f5dd565288e19c6125f15ed05a46f43f
-
SHA1
cbe2bbfda79c4e71d5236e80d0cc62b19e420c46
-
SHA256
acde40ab1f800c9c616a5a9cdba72abe83f23a5032d88c61daa175917385a52c
-
SHA512
7a02ef19a209dd28b28bb2555e079fc55051566116ba0b84b22f64ede8137d4b876b9b8b0113ac9979e3dd7f07ded826a6467a79ceee7b3950dc865a166567b5
-
SSDEEP
6144:KXpzivISeim9jmoD/EwY6V4WndGHtlraFUuv/wbvH43pNbEMw7:EpzUISefhrb5E6FUuwb/43pKM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5dd565288e19c6125f15ed05a46f43f_JaffaCakes118
Files
-
f5dd565288e19c6125f15ed05a46f43f_JaffaCakes118.exe windows:4 windows x86 arch:x86
846dfa2fb02d4bd9e0fc55d4c5a64361
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
FlushConsoleInputBuffer
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore
oleaut32
DispGetIDsOfNames
OleLoadPicture
OACreateTypeLib2
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx
shlwapi
PathIsUNCW
Sections
.text Size: 138KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ