Static task
static1
Behavioral task
behavioral1
Sample
5c3657e617a6bcff01d0fc9b3ed838d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c3657e617a6bcff01d0fc9b3ed838d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c3657e617a6bcff01d0fc9b3ed838d9_JaffaCakes118
-
Size
342KB
-
MD5
5c3657e617a6bcff01d0fc9b3ed838d9
-
SHA1
bfeaa75f6cb35353aa9a5e61c4644e3082360bf7
-
SHA256
991f82b805f6a48eb585565ddefa6aa7f4d59377cb11c43a1ed4f2e547e0d760
-
SHA512
d2c90cc35a99e5e8195a9f63af485faadd8047be3a2aefd32ebf00c57bdb44ce526b7f56e8eb47f3ff915f086cf382a0fe506eb3d2a891b9870fbcd95c6372a6
-
SSDEEP
6144:vWt5YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gOwTnq4:wYvDsakbClM2pxYB3CuM/xbr4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3657e617a6bcff01d0fc9b3ed838d9_JaffaCakes118
Files
-
5c3657e617a6bcff01d0fc9b3ed838d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
1dfbf2fe28f1570d7ce5d9e11d0330b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
CreateEventA
FreeEnvironmentStringsA
GlobalLock
LocalFree
CreateMailslotA
FindClose
GetStdHandle
CloseHandle
GlobalUnlock
GetLastError
GetModuleHandleA
GetConsoleCP
lstrlenA
CreateFileMappingA
LoadLibraryExA
HeapCreate
IsBadReadPtr
GetACP
CreateFileA
user32
DispatchMessageA
GetIconInfo
GetMessageA
EndDialog
GetDlgItemTextA
GetDC
GetDlgItem
DialogBoxParamA
SetFocus
CheckMenuItem
IsMenu
RedrawWindow
GetListBoxInfo
DrawIconEx
uxtheme
EnableTheming
CloseThemeData
GetThemeColor
GetThemeMetric
DrawThemeIcon
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ