Static task
static1
Behavioral task
behavioral1
Sample
5de9e73b3d4e89edd39c77d447a36dc8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5de9e73b3d4e89edd39c77d447a36dc8_JaffaCakes118
-
Size
286KB
-
MD5
5de9e73b3d4e89edd39c77d447a36dc8
-
SHA1
6408b8b96e9a28d2797c2f39a5e0d6529f4123f9
-
SHA256
f330dda821d6404f5127defe9bcc5c5d81b3f44f9758aac4b3c3f0fd5870eec5
-
SHA512
182fc66a2f778fce3ee6ffcb40ab62c8aa8bc9b649a24e6f703d81eb0ec22a64810a500639ee5bd461194e6be123fddabb2cf341071c62b0fe4f3d34a55e77c3
-
SSDEEP
6144:DElsFIQmo6vZ8nN22RFJiKMvEBirjadlBrq639pO+Wx:48IX6NBP8MOjadbrq6LO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5de9e73b3d4e89edd39c77d447a36dc8_JaffaCakes118
Files
-
5de9e73b3d4e89edd39c77d447a36dc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
6259dd7ba560a9a8ddbde10c524489d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
GetAcceptLanguagesA
PathCreateFromUrlW
PathIsRelativeW
StrCmpIW
UrlCreateFromPathW
UrlUnescapeW
PathRemoveFileSpecW
PathFindExtensionW
PathAppendW
PathCombineW
kernel32
SetFileAttributesW
WaitForSingleObject
GetCurrentProcessId
GetSystemDirectoryW
CreateMutexW
GlobalFindAtomW
GetSystemInfo
ExpandEnvironmentStringsW
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleA
LoadLibraryExW
GetProcessHeap
FreeLibrary
FindClose
WritePrivateProfileStringW
lstrlenA
EnumResourceLanguagesA
LocalFree
FindNextFileW
GetPrivateProfileIntW
FindFirstFileW
GetModuleHandleW
GetCurrentDirectoryW
LoadLibraryExA
LoadLibraryW
GetPrivateProfileStringW
ReleaseMutex
CopyFileW
HeapAlloc
HeapFree
GetWindowsDirectoryA
GetCurrentProcess
rpcrt4
UuidCreate
Sections
.text Size: 142KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ