Static task
static1
Behavioral task
behavioral1
Sample
5d282c308013b4f487dc40ef7998043c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d282c308013b4f487dc40ef7998043c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d282c308013b4f487dc40ef7998043c_JaffaCakes118
-
Size
446KB
-
MD5
5d282c308013b4f487dc40ef7998043c
-
SHA1
7e8ef664034f09e8f1ce97a0f28179dadd5bb527
-
SHA256
15e213f773c261e003eda59a791086cac7c12b1883336a4047e3f1b8d4e9a9b0
-
SHA512
ea739e806f88b56c8baf106bbf0309173ebefb2984937c79c876aff48e9750cc50364251552cafb7c4b3f0770cd0df409c2766da2404d325ab034299f122d13a
-
SSDEEP
6144:++mwrvkfZDfeXoiYUzJm0XptqquCil5R7n5VBrVtz0nWOq4:++ABaX3zX5tI1v5VBfz0nWOB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d282c308013b4f487dc40ef7998043c_JaffaCakes118
Files
-
5d282c308013b4f487dc40ef7998043c_JaffaCakes118.exe windows:4 windows x86 arch:x86
0dbdade958e3c510d172d654e4beb87f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
SetRect
GetWindowRect
EnumWindowStationsW
SetForegroundWindow
IsIconic
GetLastActivePopup
ShowWindow
GetClientRect
dciman32
DCIBeginAccess
kernel32
SetFileAttributesA
GetProcessHeap
RemoveDirectoryW
LocalFree
GetModuleFileNameA
SetFileAttributesW
GetStdHandle
GetModuleFileNameW
GlobalAlloc
RemoveDirectoryA
DeleteFileW
CloseHandle
DeleteFileA
FreeLibrary
ExitProcess
GlobalFree
GetShortPathNameA
CompareStringW
lstrcpynA
GlobalUnlock
ExitProcess
CopyFileW
GetLastError
GlobalLock
GetModuleFileNameW
GetShortPathNameW
CopyFileA
GetModuleHandleW
GetModuleHandleA
FormatMessageA
LoadLibraryA
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bore Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE