Static task
static1
Behavioral task
behavioral1
Sample
5ac01cc99884443d5dd8f91b25f5f452_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ac01cc99884443d5dd8f91b25f5f452_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ac01cc99884443d5dd8f91b25f5f452_JaffaCakes118
-
Size
90KB
-
MD5
5ac01cc99884443d5dd8f91b25f5f452
-
SHA1
cf315dd41fcb92ba4f8f53bde0dd6a15760be0f7
-
SHA256
44789f2f6aeee3c48e06b73015dd892d83b094d4d77315bb51f32b9d0a983dd6
-
SHA512
12e5caa7432d092c698039bf7a09c3709950750a7f47b6e08989fbe7eeb052c7ec0897f77ef195a0175801d5acdd8f68afa80cf53191460e3bc81f5505d5db9a
-
SSDEEP
1536:YyfydpUNEcuEJd5tA7A5ZfttYwWmRAhMfPA:zfydpUJuEBtzN7kmRAef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ac01cc99884443d5dd8f91b25f5f452_JaffaCakes118
Files
-
5ac01cc99884443d5dd8f91b25f5f452_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9475b0d0058ca192de39d9c25bf0c12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetWindowTextLengthA
DrawTextA
DrawTextW
GetFocus
GetMenu
LoadMenuA
DrawIconEx
GetWindowTextA
InsertMenuA
CreateIcon
GetDlgItem
DialogBoxParamA
DialogBoxParamW
CloseWindow
DrawIcon
EndDialog
CopyRect
GetDC
kernel32
DeleteFileW
OpenFileMappingA
CreateProcessA
ReadConsoleA
GetStdHandle
GetConsoleMode
DeleteAtom
Sleep
ReadFile
DeleteFileA
OpenFile
GetLastError
GetFileSize
GetCPInfo
CreateThread
GetCommandLineA
GlobalFree
FindFirstFileA
ExitThread
FindAtomA
SetLastError
GetComputerNameA
comctl32
ImageList_GetIconSize
CreateUpDownControl
ImageList_GetIcon
ImageList_Create
ImageList_Destroy
DllGetVersion
CreateToolbar
ImageList_AddIcon
MenuHelp
CreateToolbarEx
CreateStatusWindow
InitCommonControls
ImageList_Add
ImageList_Draw
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 41KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 233B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 487B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ