Static task
static1
Behavioral task
behavioral1
Sample
5b33dc514546354b5a84dd265bccb67a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5b33dc514546354b5a84dd265bccb67a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5b33dc514546354b5a84dd265bccb67a_JaffaCakes118
-
Size
309KB
-
MD5
5b33dc514546354b5a84dd265bccb67a
-
SHA1
120a599048b7362c33ad2761c6cacc2e9e0e1010
-
SHA256
fc806744d2885ace28f155cca4ea6ac8b7fd5a010aa2af3c9fa215bd21dee347
-
SHA512
b24199e2be6f6c050515cb8cb4159dd40528f5ebf185e0cc86cc9ee94d9e8a5e47e36802bde4c8f1e24efdf19b7230491c1f641c05746cccb135aec8b572f4f5
-
SSDEEP
6144:Px9IzrOrDnPLbWVOk72TsciQIJsVD8Qk/Zw+FnXpaMJgotNIw:PE/yTSVUiQgsD6/S+1paM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b33dc514546354b5a84dd265bccb67a_JaffaCakes118
Files
-
5b33dc514546354b5a84dd265bccb67a_JaffaCakes118.exe windows:5 windows x86 arch:x86
ae0364058b0f5b39fd5d9c2e265020d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
BitBlt
comdlg32
GetOpenFileNameW
advapi32
FreeSid
shell32
ord165
shlwapi
PathAppendW
gdiplus
GdipFree
imm32
ImmNotifyIME
msimg32
AlphaBlend
comctl32
InitCommonControlsEx
Sections
.MPRESS1 Size: 169KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE