Static task
static1
Behavioral task
behavioral1
Sample
5a4f9d756c846b4b0f2429e351dffab9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a4f9d756c846b4b0f2429e351dffab9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a4f9d756c846b4b0f2429e351dffab9_JaffaCakes118
-
Size
113KB
-
MD5
5a4f9d756c846b4b0f2429e351dffab9
-
SHA1
0828cfd19d3ded3257c936f19da91fbb432f7dad
-
SHA256
87c63633ca9f5001abbf70903ab3f54aa71f33076558a2bc86ce08e50289d060
-
SHA512
4dc93c747a6ef71266b8e7c12e83fbcb70587e40b180753f7e720ccf8d019315c692242bb6fc7895ea15ba7771acaf1dc9326ef77142ff81a397868ecb248b93
-
SSDEEP
3072:DjoCMXP+f6FmxNTwNYFEB0M8tjWEHyxWul:/oCc+f67NY6+M8tHyxWul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a4f9d756c846b4b0f2429e351dffab9_JaffaCakes118
Files
-
5a4f9d756c846b4b0f2429e351dffab9_JaffaCakes118.exe windows:5 windows x86 arch:x86
56a5765e564362020bb00431eedaba29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
user32
GetKeyboardType
MessageBoxA
CharToOemBuffA
wvsprintfW
MessageBoxW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetLastError
GetCommandLineW
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WinExec
VirtualQuery
SwitchToThread
Sleep
SetFilePointer
SetEndOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
GetTickCount
GetProcAddress
GetLocalTime
GetLastError
GetFileTime
GetFileSize
FreeLibrary
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitProcess
EnterCriticalSection
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateEventW
CloseHandle
LoadLibraryW
GetModuleFileNameW
GetFileAttributesW
GetCommandLineW
FindResourceW
CreateFileW
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ