Static task
static1
Behavioral task
behavioral1
Sample
joke.swf______________________________________.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
joke.swf______________________________________.exe
Resource
win10v2004-20240709-en
General
-
Target
5bfd0a0c6485fc489bf73f6f62dc63a9_JaffaCakes118
-
Size
322KB
-
MD5
5bfd0a0c6485fc489bf73f6f62dc63a9
-
SHA1
a8ecffefbbb3ec39ff757e1a0dfd00844828832a
-
SHA256
26a803bf9cbbc76a95dd8af22bb02febd33f3c9077aea286e09da6dc7bce6868
-
SHA512
a50c0a9388ca9b257c8ce405fda3bd74ab4bb8b0541eeecc8392a93181f7a27bd8a0d32b0364195aded1f9ee743981a64dba8d56943c063a675f821de4154578
-
SSDEEP
6144:IpYyM+Ibh0yz7tP4tiT/gIU/WsUafoiXAwJhcYMNKOJopbsWCsubq2:IDM+3a7+QFUOrafoqAwRAKAocq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/joke.swf______________________________________.exe
Files
-
5bfd0a0c6485fc489bf73f6f62dc63a9_JaffaCakes118.zip
-
joke.swf______________________________________.exe.exe windows:4 windows x86 arch:x86
3cf2878286f4831f0faa65a58d8d74b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
DeleteCriticalSection
GetCommandLineA
GetTickCount
EnumResourceTypesA
ReleaseMutex
GetModuleHandleA
GetExitCodeProcess
GetDiskFreeSpaceExW
TlsGetValue
GetComputerNameA
SetLastError
FreeConsole
VirtualProtect
FindClose
CreateMutexA
GetLastError
LoadLibraryExW
Sleep
CloseHandle
shell32
SHGetNewLinkInfo
SheChangeDirA
DragQueryFileA
DragAcceptFiles
SHGetSettings
DragFinish
SHFree
SHGetDiskFreeSpaceA
ShellMessageBoxA
SHAlloc
SHGetMalloc
ShellAboutA
StrChrA
glmf32
glsBlock
glsComment
glsAppRef
glsChannel
glsBinary
user32
MessageBoxA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ