Static task
static1
Behavioral task
behavioral1
Sample
5ddc0c5620230ed6a67859df6d5c0700_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ddc0c5620230ed6a67859df6d5c0700_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ddc0c5620230ed6a67859df6d5c0700_JaffaCakes118
-
Size
46KB
-
MD5
5ddc0c5620230ed6a67859df6d5c0700
-
SHA1
51e087e2448f262b3e7b2c9d1a0abc710d5f6354
-
SHA256
54c79294567ffca625064e3f3d5e780dee254fd2a47a9aac1c88e5d9dd0d21b4
-
SHA512
e1dcfc391818ac40a1749f8aff67a8cca939471bcb27cf17a9d8c9c9af9c83d99fa8f599b3fbaaebeb72cca5302a22f8b7e655145bc1c1e5e887d94eef5b35c4
-
SSDEEP
768:Bd/3MV7zO4ZnhimNaH/yCbwtivBbNcRdpmKMvKMEjz2Lp75rIguoSZF:BZ85hi7fMtivBbNkdpN7Mn75rI7F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ddc0c5620230ed6a67859df6d5c0700_JaffaCakes118
Files
-
5ddc0c5620230ed6a67859df6d5c0700_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0d5a15991fbbee70da0f6fdf7e75a36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent
user32
wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE