Static task
static1
Behavioral task
behavioral1
Sample
5cef8af12edde6b31e25f665bbe265bc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cef8af12edde6b31e25f665bbe265bc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cef8af12edde6b31e25f665bbe265bc_JaffaCakes118
-
Size
197KB
-
MD5
5cef8af12edde6b31e25f665bbe265bc
-
SHA1
12ff2b6debe4227abb4fa99d95c34571919e98df
-
SHA256
ca78fc778420cbf79c514c010118cf1dd6144d8a3bc594c124f60bce3c96d6b7
-
SHA512
c3abb184b9ba123dd7adf363e016e047eda8f18fa168a365ac05516c040b4537c91daad7e68695487c96fa7682044771d487ae1de0b6baf97c1658a4e32fe1dc
-
SSDEEP
6144:aq3s3lD8bVqom+2DR/tUxXc66utidrQIS6Xb:w8bEPN/KxXcVGikCXb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cef8af12edde6b31e25f665bbe265bc_JaffaCakes118
Files
-
5cef8af12edde6b31e25f665bbe265bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
9eee9c2903b883ec5c4172725b229b59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ClipCursor
CreatePopupMenu
TrackPopupMenuEx
DestroyMenu
FindWindowA
RedrawWindow
GetDesktopWindow
rpcrt4
I_RpcFreeBuffer
UuidCreate
gdi32
SetStretchBltMode
CreateDCW
GetObjectType
StretchBlt
BitBlt
LineTo
CreateCompatibleDC
DeleteDC
CreatePen
CreateDIBSection
SelectObject
CreateBitmap
kernel32
FlushInstructionCache
ExitProcess
LoadLibraryW
LocalAlloc
ExitProcess
SetLocaleInfoW
GetVersionExA
LocalFree
GetModuleFileNameA
ole32
CoUninitialize
StringFromGUID2
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance
winmm
timeGetTime
comctl32
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
msimg32
AlphaBlend
TransparentBlt
gdiplus
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipDisposeImage
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ