Static task
static1
Behavioral task
behavioral1
Sample
5c837c0eef87e25e32a6cb432ff2c9b8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c837c0eef87e25e32a6cb432ff2c9b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c837c0eef87e25e32a6cb432ff2c9b8_JaffaCakes118
-
Size
35KB
-
MD5
5c837c0eef87e25e32a6cb432ff2c9b8
-
SHA1
52801edebc58fcf689e8e62a4c45bafbdbd4be9a
-
SHA256
f48cac72afe74e329af6bc8931efe672612c8b9f42b06fdf811b4ca85cc80f9f
-
SHA512
c7411e5d29f10ac3ce47496258c7f19f457ea45cf071027d0bf53bd66fb20276c935429ffd70535d18a43354c953cb00daee5ffd059b87c25bc0f8501843abe9
-
SSDEEP
384:7mHFguBhmuj4w4byUDm8WtQ5wLfTTfi+QaAHR1HMVYalJG9z:apj4TtDm8WCKLbGXr1HMVYay9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c837c0eef87e25e32a6cb432ff2c9b8_JaffaCakes118
Files
-
5c837c0eef87e25e32a6cb432ff2c9b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f072d8645112608cd2207a8d43676ebb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
WinExec
CloseHandle
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
ExitProcess
GetVersionExA
CreateThread
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
DeleteFileA
MoveFileA
FindFirstFileA
CopyFileA
GetModuleFileNameA
MoveFileExA
user32
PostMessageA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
BlockInput
keybd_event
FindWindowA
ShowWindow
DispatchMessageA
msvcrt
_mkdir
_controlfp
_except_handler3
_strrev
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
memset
strlen
_exit
_XcptFilter
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ