Static task
static1
Behavioral task
behavioral1
Sample
5bbd3a2ddd97973615d874a0b4d6e2e4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bbd3a2ddd97973615d874a0b4d6e2e4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bbd3a2ddd97973615d874a0b4d6e2e4_JaffaCakes118
-
Size
125KB
-
MD5
5bbd3a2ddd97973615d874a0b4d6e2e4
-
SHA1
16aae33eb8809da94ac1e0a48bb1a32310cd5721
-
SHA256
9c3a53a70fc04e0d75db1da97996a534892c7d6e3ebb7c801d107248ab191f03
-
SHA512
ea0704b58fdf03bcbf47d579586ecba46a6fe13fb84345e22907089143bfea7a4b8c4ff8891903a390ada59244054ad13e3affa8e9b34f486fc88588b538fd74
-
SSDEEP
1536:ZaTsq7wj5Jr1sssK4Zo5Qut6Ch4WWWnWpWWWWlWTa5WWWWWWWWWWWWWWWWWWWWWH:nQKOob66MtzWz0djuR6AicYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bbd3a2ddd97973615d874a0b4d6e2e4_JaffaCakes118
Files
-
5bbd3a2ddd97973615d874a0b4d6e2e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
20a37338d40e19f78cc07b3c73de4091
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLocalTime
GetFileSize
GlobalAlloc
lstrcpyA
Sleep
VirtualProtect
GetModuleHandleA
VirtualAlloc
FindResourceA
GlobalFree
WriteFile
GetStdHandle
CreateThread
FreeResource
SizeofResource
SetComputerNameW
LoadResource
FindResourceExA
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
lstrcpyW
lstrlenW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
CreateDirectoryA
SuspendThread
GetLastError
VirtualFree
LockResource
HeapAlloc
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetStringTypeW
user32
SetSysColors
MessageBoxA
GetDesktopWindow
IsWindowVisible
LoadCursorA
gdi32
CreateBitmapIndirect
SelectObject
avifil32
AVIBuildFilterA
ws2_32
WSAGetLastError
accept
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rlc Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE