Static task
static1
Behavioral task
behavioral1
Sample
5c84c5df387995cee24310c5413e349e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5c84c5df387995cee24310c5413e349e_JaffaCakes118
-
Size
224KB
-
MD5
5c84c5df387995cee24310c5413e349e
-
SHA1
23cd72d104bb509764a30035280ae8fefda48695
-
SHA256
2d1f5edbbf47adb4403bf9d506c723bfbec1b59a8464de79c3683d32204ab206
-
SHA512
a48070e155c488b7a2786b8920561e68627d8727916cf9fa4c3d686535b6a6d6176d6cc632d0e0afeadd7627139321216d3f4efd8befc0b2ed41b257f51484d9
-
SSDEEP
3072:rtVIV8ldER4fQMNYleZfBv7EI1ru4uo0NdefJuk/Tz7MgAP2x+6OHKJtweM:rPER4IMNYleZfBv7EIuMxXnMrPoCEel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c84c5df387995cee24310c5413e349e_JaffaCakes118
Files
-
5c84c5df387995cee24310c5413e349e_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e35e85f26450b43f37dc90bc7cf5e7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualLock
IsBadCodePtr
LoadLibraryA
VirtualProtect
OpenSemaphoreA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GlobalLock
ResetEvent
VirtualAllocEx
GetLocaleInfoA
VirtualFree
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
FileTimeToSystemTime
GetLastError
HeapFree
GetStringTypeW
GetSystemDirectoryA
GetCPInfo
GetOEMCP
GetACP
HeapCreate
GetSystemInfo
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
user32
GetTopWindow
LoadCursorA
GetDesktopWindow
FindWindowA
GetCursorPos
LoadIconA
SetTimer
ReleaseDC
CreateIcon
IsIconic
SetCursorPos
GetWindowRect
SetCursor
LoadAcceleratorsA
ShowWindow
GetWindow
GetDC
gdi32
GetBrushOrgEx
CreateHatchBrush
GetPixel
SelectObject
shell32
ord195
SHGetFolderLocation
psapi
GetWsChanges
GetProcessMemoryInfo
GetModuleBaseNameA
GetModuleInformation
msvfw32
DrawDibOpen
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ