Static task
static1
Behavioral task
behavioral1
Sample
5c1ea7e4bd093555a65aaf91f8d35fee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c1ea7e4bd093555a65aaf91f8d35fee_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c1ea7e4bd093555a65aaf91f8d35fee_JaffaCakes118
-
Size
80KB
-
MD5
5c1ea7e4bd093555a65aaf91f8d35fee
-
SHA1
b8b2dd689874a631d1cdf0e1a928cb2317e5a603
-
SHA256
571c931b5467d14109cdb6553775b6a073f425a67e98985e31d6fd52b3bdbf2a
-
SHA512
b3671882f7df1d10e961b29d6e5eac3e05b9a9518468b26f5de85d818fdffe92796e5f148557338ea274cca3a9910c21199105f5bd255a173f2537d8e4c13b79
-
SSDEEP
768:WUCVz5bpcjQ86DZZjhZbfXn5naRTMQ9btdjKte6PesAl6WmsPJAoiZPvBRG:sNba5CnbzX5na57ZZKwL560xAXZX3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c1ea7e4bd093555a65aaf91f8d35fee_JaffaCakes118
Files
-
5c1ea7e4bd093555a65aaf91f8d35fee_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfffaa2c11ff4b5ba9d523d04f59cd7d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
AppendMenuA
AppendMenuW
CalcMenuBar
GetWindowTextLengthA
DrawTextA
LoadMenuA
GetDC
LoadCursorA
CloseWindow
GetWindowTextA
GetFocus
CopyImage
IsWindow
AppendMenuA
InsertMenuA
DrawIconEx
DrawTextW
DialogBoxParamA
GetDlgItem
CopyRect
AppendMenuW
LoadMenuA
BlockInput
DrawIcon
GetCursor
CopyIcon
AlignRects
GetMenu
DialogBoxParamW
advapi32
RegQueryValueW
RegOpenKeyExA
RegEnumKeyW
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyExA
RegEnumValueW
RegReplaceKeyA
RegOpenKeyW
RegReplaceKeyW
RegLoadKeyW
RegFlushKey
RegGetKeySecurity
RegLoadKeyA
RegDeleteValueW
kernel32
DeleteFileA
GetStdHandle
GetCPInfo
FindAtomA
GetFileSize
GetLastError
ExitThread
DeleteAtom
Sleep
OpenFileMappingA
CopyFileExW
GlobalFree
ReadFile
OpenFile
ReadConsoleA
WriteFile
GetFileTime
CopyFileA
SetLastError
CreateProcessA
DeleteFileA
DeleteAtom
GlobalFree
GetFileTime
GetCommandLineA
GetConsoleMode
SetLastError
ReadFile
FindFirstFileA
WriteFile
CopyFileA
CreateThread
ExitThread
GetFileSize
OpenFileMappingA
GetComputerNameA
OpenFile
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jedata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ