Static task
static1
Behavioral task
behavioral1
Sample
5b23d570bc570b1c2b543e24283c98e0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b23d570bc570b1c2b543e24283c98e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b23d570bc570b1c2b543e24283c98e0_JaffaCakes118
-
Size
1.1MB
-
MD5
5b23d570bc570b1c2b543e24283c98e0
-
SHA1
7bcab21f1cc74a627b46eac1077765b956a8051c
-
SHA256
10a275c83b466c76c13f0b34d1ceb2c4596a51a71b849fa0e00d6e642a5c54d9
-
SHA512
a75945b5202cb6abb960c6113f2d2cd7b034c6c66bbce1eddf3c3b315d48ec4ab5a5ba9dcde994dc847b56564410d372be0103374c96b08e680ec5cf477f03f2
-
SSDEEP
24576:VOFtCqsHinKd3mNj2Qu6pGuhkkL0UG61b2lgkBunriSNLJb6LR:VOcdWNLLGKvL0UlzXnWYu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b23d570bc570b1c2b543e24283c98e0_JaffaCakes118
Files
-
5b23d570bc570b1c2b543e24283c98e0_JaffaCakes118.exe windows:1 windows x86 arch:x86
27188f571b05646ead986cf098e1c217
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLastError
GlobalUnWire
GetFileInformationByHandle
FindFirstFileExW
GetProcessId
GetProcessHeaps
SetConsoleTextAttribute
FillConsoleOutputCharacterA
GetEnvironmentStringsA
VirtualAllocEx
CloseHandle
GetCalendarInfoA
GetStdHandle
GetStringTypeA
user32
SendMessageTimeoutA
OemToCharBuffW
SendNotifyMessageA
GrayStringA
ImpersonateDdeClientWindow
SendMessageCallbackA
LoadMenuA
DlgDirListComboBoxW
GetDlgItem
EnumDisplayMonitors
GetClassInfoExA
CascadeWindows
Sections
CODE Size: 407KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 715KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ