Static task
static1
Behavioral task
behavioral1
Sample
5a353007ada594fa0a6510adfec55b50_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a353007ada594fa0a6510adfec55b50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a353007ada594fa0a6510adfec55b50_JaffaCakes118
-
Size
38KB
-
MD5
5a353007ada594fa0a6510adfec55b50
-
SHA1
675e276c15f92028261567ddbe7bac2faa8e208f
-
SHA256
2dd8e9a2908202763767e053ea9c014840aa94b209d5ea0e81739f92fde65a80
-
SHA512
332db60f59decb0d33ef48812bdd005f91ca546ef741de92104faf20fc7bf048945f8e75c6290322ac8ae2edbd642a8a2e6edd9e8333e49cf7ca53ec81c3f314
-
SSDEEP
384:GaQ3Bun4NZ2sLJxkyU31xM52xvBv2RyGkpMSnwdB6UmVlbcUn3k9gBJJiooJ0KOu:Z8XLbDUvG232gM/HQa9Y7FE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a353007ada594fa0a6510adfec55b50_JaffaCakes118
Files
-
5a353007ada594fa0a6510adfec55b50_JaffaCakes118.exe windows:5 windows x86 arch:x86
8da848238edc192e427de1898bfda9cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceW
InterlockedExchange
GetCurrentProcess
GetLastError
PurgeComm
AllocConsole
FatalExit
GetConsoleNlsMode
FindAtomW
DeleteTimerQueue
GetCurrentThreadId
GetTempPathW
GetUserDefaultLCID
GlobalAlloc
SetUnhandledExceptionFilter
ClearCommBreak
CreateMemoryResourceNotification
CreateFileW
AddAtomW
ExitThread
TerminateProcess
DeleteCriticalSection
GetModuleHandleW
CancelIo
OpenConsoleW
EnumDateFormatsExW
CreateMutexW
GlobalAddAtomW
CancelTimerQueueTimer
VirtualAlloc
msvcrt
_chgsign
_close
_assert
_beep
_access
_cabs
_atoldbl
_chdir
_cgetws
_atoi64
ws2_32
bind
WSACleanup
closesocket
socket
WSAStartup
WSALookupServiceNextW
listen
Sections
.data Size: - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE