Static task
static1
Behavioral task
behavioral1
Sample
5b399531d9e76c340e0de369af043214_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b399531d9e76c340e0de369af043214_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b399531d9e76c340e0de369af043214_JaffaCakes118
-
Size
109KB
-
MD5
5b399531d9e76c340e0de369af043214
-
SHA1
eb2f605f6fcd1872616c3e4b4f58286876b33785
-
SHA256
422b6f18e47d1799d2b8580e7503e18ecfe51bfa963a7b8e4d0c77b8b2e30aeb
-
SHA512
3514fd60dac3e2fde7666405fa9ccd19b59f42551105658b02c0d7833c2ffd9af870d25cdd0510fced95567f59939b4b1526949f7277be6a79db8cabe2708259
-
SSDEEP
3072:eHBEQJbLa3qs+fLUdSZhomJlbiB4S14jWmR:CEQJna3JhQZaYbiB9CjRR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b399531d9e76c340e0de369af043214_JaffaCakes118
Files
-
5b399531d9e76c340e0de369af043214_JaffaCakes118.exe windows:4 windows x86 arch:x86
44aeb6fede908e5f59de10a241bd4084
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowCaret
SetTimer
UpdateWindow
SetWindowRgn
SetWindowPos
SetDlgItemTextA
SetClipboardData
SetCaretPos
SetCapture
SendMessageA
ReleaseCapture
RegisterClassA
PostQuitMessage
OpenClipboard
MessageBoxA
LoadCursorA
KillTimer
InvalidateRect
HideCaret
GetWindowRect
GetSystemMetrics
GetMessageA
GetDC
EndPaint
GetCursorPos
GetClipboardData
DispatchMessageA
EndDialog
DragDetect
DefWindowProcA
DialogBoxParamA
DestroyWindow
CloseClipboard
CreateWindowExA
CreateCaret
ShowWindow
BeginPaint
TranslateMessage
kernel32
lstrcatA
lstrlenA
lstrcpyA
Sleep
SetFilePointer
ReadFile
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
ExitProcess
CreateThread
CreateFileA
CloseHandle
gdi32
TextOutA
SetTextColor
SelectObject
GetCharWidthA
SetBkMode
CreatePolygonRgn
CreateEllipticRgn
DeleteObject
CreateCompatibleDC
CombineRgn
CreateDIBitmap
BitBlt
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ