Static task
static1
Behavioral task
behavioral1
Sample
5d1a21bf4287bb458bda39627ddce426_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d1a21bf4287bb458bda39627ddce426_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d1a21bf4287bb458bda39627ddce426_JaffaCakes118
-
Size
35KB
-
MD5
5d1a21bf4287bb458bda39627ddce426
-
SHA1
54e87dead659ea26e4f3d7312a1b995aa53dfc91
-
SHA256
ce276bef06cc76166abccbdfe5f95d3f7ae5191d56cbb2c5ee7fed07cbfbb4ee
-
SHA512
664d8bb1fc2cc5bc682bd46597bfea116c989f1aafdb54eba499fd2614200c9f973be9245d430810057b57877e8f943652b631ac90b1f13656a6723ea6f7519c
-
SSDEEP
768:4OPIYf24VdhfWklcGqA4pDS+4F2ZxEtZ+XX6F:4OwYe4VVF8Fe2zoZ+n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d1a21bf4287bb458bda39627ddce426_JaffaCakes118
Files
-
5d1a21bf4287bb458bda39627ddce426_JaffaCakes118.exe windows:4 windows x86 arch:x86
56118a502e8274914e19ea396190d750
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextW
GetDC
GetCursor
CopyImage
IsWindow
EndDialog
DrawIconEx
DialogBoxParamW
CreateIcon
DrawTextA
GetFocus
DrawIcon
GetWindowTextA
IsMenu
LoadMenuA
CloseWindow
CopyRect
LoadCursorA
CopyIcon
InsertMenuA
GetWindowTextLengthA
DialogBoxParamA
GetDlgItem
GetMenu
kernel32
GetVersion
GetACP
lstrcpynA
lstrcatA
GetStringTypeW
GetStartupInfoA
WriteFile
TerminateProcess
GetCommandLineA
CreateFileA
lstrcpyA
GetModuleFileNameA
GetOEMCP
LCMapStringW
LCMapStringA
GetCPInfo
GetFileType
SetHandleCount
SetFilePointer
GetCurrentProcess
GetStdHandle
lstrcpynW
GetStringTypeA
comctl32
ImageList_Destroy
MenuHelp
ImageList_Add
CreateToolbar
ImageList_Draw
CreateUpDownControl
ImageList_EndDrag
DllGetVersion
ImageList_DrawEx
ImageList_DragEnter
advapi32
RegEnumKeyA
RegQueryValueW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyA
RegEnumValueW
RegCreateKeyW
RegQueryValueExA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 17.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ