Static task
static1
Behavioral task
behavioral1
Sample
5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118
-
Size
104KB
-
MD5
5d5ec039c6e151b1d7119f9aae350c0d
-
SHA1
7a654ff2489ff36d08ff73343669a40a3c45ea73
-
SHA256
8646105621d6c01b212cede10b2fde39c70d76d8cece3bb957c2e4b5176fd9d1
-
SHA512
e76391fcc6a5fe8134831dbfc245e6f99b601a638ce7571495e597512f3a96f031d63e0db6bfc15e980944c72537a930b28144932bebfe82a687121853353fa5
-
SSDEEP
3072:Lx78Ll6UnxKC6FWhd9aP6YsaS+LQXyjPoU:F7QDxvwWhdgCYspXuo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118
Files
-
5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ce75ea0abf253665c78c43ea1d3482d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
GetThemeFont
GetCurrentThemeName
IsThemeActive
DrawThemeEdge
CloseThemeData
SetWindowTheme
GetThemeInt
GetThemeBool
GetThemeEnumValue
GetWindowTheme
GetThemeColor
GetThemeTextMetrics
kernel32
lstrcpynW
GetProcessHeap
QueryDosDeviceA
ReplaceFileA
CreateMutexW
FileTimeToSystemTime
FindNextFileA
GetBinaryTypeA
DeleteFileW
WriteConsoleW
WriteFile
CreateFileA
ReadFile
GetProcAddress
GetVersion
OpenJobObjectA
GetModuleHandleA
CopyFileA
GetDriveTypeW
CreateHardLinkA
GetLocaleInfoW
WaitForSingleObjectEx
lstrcatA
GetFileSize
wtsapi32
WTSVirtualChannelPurgeInput
WTSFreeMemory
WTSSendMessageA
WTSEnumerateSessionsA
WTSWaitSystemEvent
WTSVirtualChannelOpen
WTSTerminateProcess
WTSSetUserConfigA
WTSEnumerateProcessesA
WTSRegisterSessionNotification
WTSOpenServerA
WTSDisconnectSession
WTSVirtualChannelWrite
WTSUnRegisterSessionNotification
WTSQuerySessionInformationA
dhcpcsvc
DhcpEnumClasses
McastApiCleanup
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ