Static task
static1
Behavioral task
behavioral1
Sample
5d4d21edbb91f873e053a9974c5702b8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d4d21edbb91f873e053a9974c5702b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d4d21edbb91f873e053a9974c5702b8_JaffaCakes118
-
Size
317KB
-
MD5
5d4d21edbb91f873e053a9974c5702b8
-
SHA1
d4140bf64e6c70b8bd3d2942b7de3c3484883200
-
SHA256
23de529d18c40cd6c2922a4cbbe154f59b1369c2ba9e49b94a652c479529eabb
-
SHA512
dd38b7cd928865b164d1f7597e0b5e0df98a8c2d0928894ebd3a28a10dc96b271b6a47b472b21eaf22d5872542c0b876871767d9dcc46a431eb50eb63942133f
-
SSDEEP
6144:GFi1UZvfVobjP/nI3cgfpS9oLw74F2ezIwPk8C2hGZMYYy:GiUZvdkbI3ccS/E2ezIwc8nYYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d4d21edbb91f873e053a9974c5702b8_JaffaCakes118
Files
-
5d4d21edbb91f873e053a9974c5702b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c7f4c7fd99591667d15da6693e8c8a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
SetConsoleOutputCP
CloseHandle
FileTimeToLocalFileTime
GlobalAddAtomA
GetLastError
RaiseException
VirtualProtect
GetStdHandle
SetErrorMode
LoadLibraryExA
LockResource
EnterCriticalSection
GlobalUnlock
GetACP
GlobalFree
HeapCreate
GlobalDeleteAtom
Sleep
GetLocaleInfoA
GetDriveTypeA
user32
GetMenuItemInfoA
OemToCharA
IsIconic
EndPaint
ClipCursor
ValidateRect
GetWindowTextA
GetFocus
GetClassNameA
GetCursorPos
GetWindow
GetActiveWindow
GetParent
SetForegroundWindow
DrawTextA
ShowWindow
BeginPaint
ReleaseDC
DrawEdge
ntdsapi
DsBindA
DsCrackNamesA
DsIsMangledDnA
DsFreeNameResultA
DsGetSpnA
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ