Static task
static1
Behavioral task
behavioral1
Sample
5d6e675f6a85c66b5245fe629bb8e82c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d6e675f6a85c66b5245fe629bb8e82c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d6e675f6a85c66b5245fe629bb8e82c_JaffaCakes118
-
Size
185KB
-
MD5
5d6e675f6a85c66b5245fe629bb8e82c
-
SHA1
ad2ce954ea5f565514301cef65b5b9ba33dd620a
-
SHA256
3b2ba54f6142055bca66d7604054b3b4a9cb585161dc6a93cf1652fe574196b7
-
SHA512
c692071c30d1898d7f430e8504234be9e8ee8f2555eea20c00d3c3378de14e92b266f0d1a97062376c21760f411ee2f7141b99cd5eae0984d3f491cf88c219a2
-
SSDEEP
3072:r85ZB/j15J5EbBYIkP/I1PH/LufsscE+CAEkck6w9HQ50S09wM26Ti1BKFeALw+j:6X5/5ECI1PHTuRcEnAZNu0PA1u0+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d6e675f6a85c66b5245fe629bb8e82c_JaffaCakes118
Files
-
5d6e675f6a85c66b5245fe629bb8e82c_JaffaCakes118.exe windows:4 windows x86 arch:x86
0710569f522cd5f4b3f6211b6839d15c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetFullPathNameA
GetEnvironmentStringsW
GlobalFindAtomA
FreeEnvironmentStringsW
IsBadReadPtr
VirtualProtect
GetEnvironmentStrings
GetDiskFreeSpaceA
UnhandledExceptionFilter
GetFileAttributesA
GetStringTypeA
SetUnhandledExceptionFilter
FindFirstFileA
EnumResourceNamesW
SetFilePointer
FlushFileBuffers
CreateFileA
WriteFile
LCMapStringW
GetOEMCP
IsBadCodePtr
GetStringTypeExA
WideCharToMultiByte
GetCPInfo
SetStdHandle
GetStringTypeW
FreeEnvironmentStringsA
LCMapStringA
ReadFile
GetThreadLocale
MulDiv
rpcrt4
RpcStringFreeA
shlwapi
SHGetInverseCMAP
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW
Sections
.text Size: 98KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ