Static task
static1
Behavioral task
behavioral1
Sample
5de9ce7d6bdab7e77b9b1ecb483c3660_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5de9ce7d6bdab7e77b9b1ecb483c3660_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5de9ce7d6bdab7e77b9b1ecb483c3660_JaffaCakes118
-
Size
216KB
-
MD5
5de9ce7d6bdab7e77b9b1ecb483c3660
-
SHA1
f3b6e6cd06ed97d16eea0af4cdc59b4ab53dfbc6
-
SHA256
0695f52dd6338acff9c8c2fd0bfd18729a269fde35c72cff58feffc19b3f0c3d
-
SHA512
a314d18cba50774a80e50725b0ad6cb4c906104d4f6ba3674e0056b5bb7b8cbf013d546b0352e3231b3f07e53f44e28d2f7f598b4e7eb50a5641976b1b73a7aa
-
SSDEEP
6144:1qLohwCJ9Bm3WHs4lH5tliS7Sf5QhmFk:1WsJ/CWH3Z5tUSmfr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5de9ce7d6bdab7e77b9b1ecb483c3660_JaffaCakes118
Files
-
5de9ce7d6bdab7e77b9b1ecb483c3660_JaffaCakes118.exe windows:4 windows x86 arch:x86
534717d8594c9619817d3d007beefa15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
CreateFileA
CloseHandle
ReadFile
DeleteFileA
WaitForSingleObject
CreateThread
FormatMessageA
GetTickCount
RemoveDirectoryA
GetVersionExA
GetLastError
Sleep
GetFileAttributesA
HeapAlloc
WriteFile
HeapFree
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetEndOfFile
HeapSize
LoadLibraryA
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
GetCPInfo
MultiByteToWideChar
CompareStringA
SetFilePointer
SetStdHandle
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetModuleFileNameA
UnhandledExceptionFilter
user32
GetKeyState
UpdateWindow
ShowWindow
SetWindowPos
SetForegroundWindow
GetWindowRect
GetForegroundWindow
GetSystemMetrics
SendMessageA
DefWindowProcA
BeginPaint
EndPaint
LoadStringA
DestroyWindow
GetClientRect
LoadCursorA
LoadIconA
RegisterClassA
CreateWindowExA
GetDC
gdi32
GetTextExtentPoint32A
SelectObject
GetStockObject
TextOutA
SetTextAlign
SetBkMode
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PACK Size: 164KB - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE