Static task
static1
Behavioral task
behavioral1
Sample
5cab9c70075a7e2bc9304eb27e324652_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5cab9c70075a7e2bc9304eb27e324652_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cab9c70075a7e2bc9304eb27e324652_JaffaCakes118
-
Size
44KB
-
MD5
5cab9c70075a7e2bc9304eb27e324652
-
SHA1
fe1031046b0205a5c8b4ca544c4a931a63a897ae
-
SHA256
428eacd8e435f87ddbfe5417d9012c47e643849461dd04193c1b13a517b7a163
-
SHA512
f46b09122c840dc912873d69dd3fb4f9f14178e0aef64af888e90b0513d6f052a2fea0b1b8463df223a00f30c5ebf35639f20163e694c43ba7338f4364a17205
-
SSDEEP
768:b7x7vZX8sKZ0gwROSxfYlb6vMG+LjqKWaVCz3cacZq1YM8KG8m/LswSi:pxMsHXMXlWvMTPfnTqB8FDswSi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cab9c70075a7e2bc9304eb27e324652_JaffaCakes118
Files
-
5cab9c70075a7e2bc9304eb27e324652_JaffaCakes118.exe windows:4 windows x86 arch:x86
69fc68c29be4216d3f5c411a41618f5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BuildCommDCBA
ClearCommBreak
CopyFileExW
ExitProcess
GetCommMask
GetConsoleCursorInfo
GetEnvironmentStringsW
GetLogicalDriveStringsA
GlobalWire
HeapReAlloc
InitializeCriticalSection
LocalFree
RtlUnwind
RtlZeroMemory
SearchPathA
SetConsoleTextAttribute
SetThreadExecutionState
SetThreadPriority
SystemTimeToFileTime
UpdateResourceA
WriteFileEx
WritePrivateProfileStructA
WriteProfileSectionA
user32
AdjustWindowRect
CharLowerA
CheckMenuItem
CreateAcceleratorTableW
DlgDirListA
DlgDirSelectComboBoxExA
DrawEdge
EnumClipboardFormats
EnumPropsExA
FlashWindow
GetClassLongW
GetMenuItemID
GetWindowTextA
GetWindowTextW
GrayStringW
IMPSetIMEA
InsertMenuItemW
IsWindow
MessageBoxA
RegisterTasklist
RemovePropA
SetWindowsHookExA
ShowWindowAsync
SwitchToThisWindow
gdi32
AnimatePalette
CreateBitmap
DeleteObject
EnumFontsA
EnumICMProfilesW
GetArcDirection
GetClipBox
GetClipRgn
GetEnhMetaFileHeader
GetFontLanguageInfo
GetGlyphOutline
GetICMProfileA
GetRandomRgn
GetTextExtentPoint32A
GetTextMetricsW
OffsetRgn
PlayEnhMetaFile
PlayEnhMetaFileRecord
RealizePalette
RectVisible
RemoveFontResourceW
SetDIBitsToDevice
SetFontEnumeration
SetGraphicsMode
SetMapMode
SetPolyFillMode
SetWinMetaFileBits
StartDocW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE