Static task
static1
Behavioral task
behavioral1
Sample
5c76f9ee9b216b44b62f519b87d34182_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5c76f9ee9b216b44b62f519b87d34182_JaffaCakes118
-
Size
2.4MB
-
MD5
5c76f9ee9b216b44b62f519b87d34182
-
SHA1
ca3ed0515034ad339f653855fefdad3b10ad37f0
-
SHA256
c7b9dda6a609d5013480bee07984a9ca2754a33a6addebddeb0d8289d0c24da6
-
SHA512
d47bee65a91303ef6c7c243607092416668c92af9ac955f836cd18e6ee4c72cef753a1049b3d142be686aeb494e081bdeff77c5727258bff18f116d74fdcf187
-
SSDEEP
49152:R3xAXmSkNW4IMf1tziT7f+UfbcEhLhbE0DJYVPD8OJVFFfuhr:R3+1fu1VWqUTc6aMGFfuhr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c76f9ee9b216b44b62f519b87d34182_JaffaCakes118
Files
-
5c76f9ee9b216b44b62f519b87d34182_JaffaCakes118.exe windows:5 windows x86 arch:x86
00346697d7f99a79cd8d9a491da8c01d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetMenuItemBitmaps
gdi32
TextOutW
msimg32
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
RegEnumKeyW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
StrFormatByteSizeW
ole32
RevokeDragDrop
oleaut32
OleLoadPicturePath
wininet
InternetSetOptionW
msi
ord141
psapi
GetProcessImageFileNameW
version
GetFileVersionInfoW
uxtheme
DrawThemeParentBackground
dbghelp
MiniDumpWriteDump
crypt32
CertGetCertificateContextProperty
wintrust
WTHelperGetProvCertFromChain
gdiplus
GdipDrawImageI
imm32
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 1.8MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 617KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE