Static task
static1
Behavioral task
behavioral1
Sample
5a69cc29c84943a7ff5299db2d44a7ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a69cc29c84943a7ff5299db2d44a7ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a69cc29c84943a7ff5299db2d44a7ef_JaffaCakes118
-
Size
54KB
-
MD5
5a69cc29c84943a7ff5299db2d44a7ef
-
SHA1
6c6c0612696a3955164dd378695f3df24ab9e8f3
-
SHA256
89fde937d0f9837f9f74551ec7d5f9ee5ebc6a16bc445440ec2d96f2d80b9b40
-
SHA512
bf3a39dc9d496d82841798a13526f70a06857b463bd464a0f986df76a1756a31c87dedbd99f5a2f8d5d82796fa7686d56060173236ddb49243def677776c2b49
-
SSDEEP
1536:HsJI+5xV1cFP+78YBMgFsWrkwIHYldd+w42i:HwIwC1nWgwIH84Gi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a69cc29c84943a7ff5299db2d44a7ef_JaffaCakes118
Files
-
5a69cc29c84943a7ff5299db2d44a7ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e7b6cee9313337a7443f7727f680d9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DefDlgProcA
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CreateCursor
CreateAcceleratorTableA
CloseWindow
CharUpperBuffA
CharUpperA
CharToOemA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout
kernel32
EnumResourceLanguagesA
lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
UnmapViewOfFile
TlsGetValue
TlsFree
SetLastError
SetEndOfFile
ReadFile
RaiseException
OpenFileMappingA
GetSystemTime
GetStartupInfoA
GetPrivateProfileStringA
GetFileSize
GetDateFormatA
ExitThread
EnumResourceTypesA
CompareStringA
Sections
.text Size: 1024B - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data0 Size: 3KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE