Static task
static1
Behavioral task
behavioral1
Sample
5cb1cedd8ee967d545d59f50a23afc2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cb1cedd8ee967d545d59f50a23afc2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cb1cedd8ee967d545d59f50a23afc2f_JaffaCakes118
-
Size
154KB
-
MD5
5cb1cedd8ee967d545d59f50a23afc2f
-
SHA1
8547d875d9f6641709526601b3b17f378a89a12b
-
SHA256
c11f04fb1cd4700cce4cb3c9ef00fc77e42acec149a11668e8ac053db9222b74
-
SHA512
e6ced071ddf0fd9b2ae3e141e3355aa1eef2348e41985492119a88ee1e53ae2bac11794b5121abae3aa9c2c897d57b8ca17484a296b652f977b61930c23d5d76
-
SSDEEP
3072:ABVdCIm9xnh9+5256jGSAbxZl7DXo0es0npy3bC+UHxF+1:ABmImdfqGSAbDVDVes6J+qL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cb1cedd8ee967d545d59f50a23afc2f_JaffaCakes118
Files
-
5cb1cedd8ee967d545d59f50a23afc2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ae224f19f873a2ef87c2d0ef25b26fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
HeapReAlloc
AddAtomA
CompareFileTime
GetTickCount
InterlockedExchange
CloseHandle
SuspendThread
HeapCreate
WaitForMultipleObjects
GetSystemDefaultLangID
GetProfileIntA
GetConsoleCP
WaitForSingleObject
VirtualProtect
GetVersion
GlobalUnlock
LoadLibraryExW
GetModuleHandleA
GetCommandLineA
GetStdHandle
user32
InsertMenuA
GetKeyState
DragObject
CreateCursor
SetPropA
GetDlgItem
DispatchMessageA
GetKeyboardLayout
GetCursorInfo
EnableScrollBar
IsDialogMessage
DialogBoxParamA
DestroyMenu
CreateCaret
DrawCaption
CreateMenu
CopyImage
CopyRect
SetWindowPos
InvertRect
FindWindowA
CreateIcon
SetScrollInfo
MessageBoxA
advapi32
RegCreateKeyExA
RegQueryInfoKeyA
RegCloseKey
RegEnumKeyA
RegEnumValueA
apphelp
GetPermLayers
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ