Static task
static1
Behavioral task
behavioral1
Sample
5ebf1b0c233e9ef06a63623c7116e4a6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5ebf1b0c233e9ef06a63623c7116e4a6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5ebf1b0c233e9ef06a63623c7116e4a6_JaffaCakes118
-
Size
133KB
-
MD5
5ebf1b0c233e9ef06a63623c7116e4a6
-
SHA1
75c59361b6a8965ddf7f48bfd761fc75be410767
-
SHA256
7ef1ecfe0e7f3ca00837d52dbc783359db692302109ad833168e4d8d781d5988
-
SHA512
8448fe724907df5d72069604740b16783ce1ec38db1eb140b17c15c684f9840b7ee80a728e71dfec1ee87c017adfce6b0b7dc29dcc8ef2c91f42112769d0aff6
-
SSDEEP
3072:4jYFtrnz2QVsDReiq9GCMDAhU0jqI07PWQZBmJoAGHjRumwA:4sneQi+GnDAa0p0rWQiJoAGHdv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ebf1b0c233e9ef06a63623c7116e4a6_JaffaCakes118
Files
-
5ebf1b0c233e9ef06a63623c7116e4a6_JaffaCakes118.exe windows:5 windows x86 arch:x86
60584e120f5e4241a96039e2cf0f873d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
adsldpc
ADSIGetNextRow
LdapGetSubSchemaSubEntryPath
LdapSearchS
Component
LdapCompareExt
BerBvFree
LdapTypeBinaryToString
BuildADsParentPathFromObjectInfo
AllocADsStr
BuildADsPathFromParent
AdsTypeToLdapTypeCopyDNWithBinary
ADSIGetFirstRow
LdapModifyS
LdapDeleteExtS
LdapTypeToAdsTypeDNWithBinary
ChangeSeparator
LdapTypeToAdsTypeGeneralizedTime
ADsEncodeBinaryData
LdapMakeSchemaCacheObsolete
MapADSTypeToLDAPType
ReallocADsMem
LdapOpenObject
BuildADsPathFromLDAPPath
SchemaGetPropertyInfo
LdapValueFreeLen
ADSICloseDSObject
kernel32
GetEnvironmentStrings
VirtualAlloc
lstrcmpW
GetStringTypeA
lstrcmpA
FreeEnvironmentStringsW
GetStringTypeW
QueryPerformanceCounter
lstrcmpiW
GetEnvironmentStringsW
SetHandleCount
lstrcmpiA
GetSystemTimeAsFileTime
GetEnvironmentStringsA
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
CreateFileW
GetOEMCP
HeapCreate
LCMapStringA
GetVersion
LCMapStringW
InterlockedExchange
user32
SetWindowsHookA
IsWindowVisible
FindWindowW
GetRawInputDeviceList
ToAsciiEx
DrawMenuBarTemp
GetClientRect
GetDesktopWindow
ShowWindow
GetDlgItem
GetCursorPos
GetSystemMetrics
InvalidateRect
GetFocus
FindWindowA
gdi32
PlayEnhMetaFileRecord
EnumFontFamiliesExW
CreateBitmapIndirect
DeleteObject
CreateFontIndirectExW
GetDeviceCaps
GetStockObject
CreatePen
GetPixel
CreateICA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ