Static task
static1
Behavioral task
behavioral1
Sample
5a62c15ea1fbaca8bf7e8b69afd6ef94_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a62c15ea1fbaca8bf7e8b69afd6ef94_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a62c15ea1fbaca8bf7e8b69afd6ef94_JaffaCakes118
-
Size
193KB
-
MD5
5a62c15ea1fbaca8bf7e8b69afd6ef94
-
SHA1
1a2593647686510ea9acd5f1560ceb83b95849e5
-
SHA256
d3a044bb2b0710ee74bf6f6fea4216f6422381e3aa9771b986edcb5c78d99b00
-
SHA512
aac21d381239916ec21610a9f621248d85dd71dfd9c6016cd7f6f2610ad257547c44f287ea00ae73b62da793760bd40d36460a12212ac712b78c1f51b67a4364
-
SSDEEP
3072:kKca/R3LncTnqgsaw1YlkgDALi04uNg2U0k5UuN0FSlbzZna8KX2:T/ZjAnVw1Y+PHTUnUuN0KzZa3X2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a62c15ea1fbaca8bf7e8b69afd6ef94_JaffaCakes118
Files
-
5a62c15ea1fbaca8bf7e8b69afd6ef94_JaffaCakes118.exe windows:4 windows x86 arch:x86
15bf7bec8c6f715949fe8cc12517d17c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSettings
ExtractIconA
SHGetDiskFreeSpaceExW
SHGetDiskFreeSpaceExA
gdi32
GetCharWidth32A
SetDIBitsToDevice
StretchBlt
AddFontResourceA
GetMapMode
GetWindowExtEx
CreateRectRgnIndirect
SetColorAdjustment
GetWorldTransform
CreatePolygonRgn
CreateEllipticRgnIndirect
MoveToEx
GetViewportExtEx
CreatePenIndirect
RealizePalette
PolylineTo
FrameRgn
SetWorldTransform
comctl32
ord5
InitCommonControlsEx
kernel32
GetFileAttributesA
GetFullPathNameA
GetBinaryTypeA
GetFileType
GetStartupInfoA
GetProcAddress
LoadLibraryA
GetModuleHandleA
FlushFileBuffers
GetDiskFreeSpaceA
GetStdHandle
Sleep
GetModuleFileNameA
user32
MessageBoxW
ClipCursor
MoveWindow
LoadBitmapA
MapWindowPoints
SendMessageA
SetWindowContextHelpId
DestroyCaret
AnyPopup
MessageBoxIndirectA
IsWindowVisible
ChildWindowFromPoint
ShowCaret
EqualRect
OffsetRect
IntersectRect
DlgDirListA
GetCursor
SetRect
GetNextDlgGroupItem
MessageBoxIndirectW
SetCursorPos
msvcrt
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_c_exit
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ