Static task
static1
Behavioral task
behavioral1
Sample
5e5d5fd39d5112b38d232d628aadedaf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e5d5fd39d5112b38d232d628aadedaf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e5d5fd39d5112b38d232d628aadedaf_JaffaCakes118
-
Size
293KB
-
MD5
5e5d5fd39d5112b38d232d628aadedaf
-
SHA1
b05d3807b2f24fb7db79568455eb59b519bac26b
-
SHA256
71d5621fd99cbcad7dd4a703455abf92fb9ef4d62301cd37b95d65ddb6093bd4
-
SHA512
d489d313afc5a7fe520d49e259494bd6460627b30262111271f8ab0b66ba96e8ed5035680302e465623024edbbc2d904a7220139daa1e641330ac6cc501e81c4
-
SSDEEP
6144:h95jxF2VCa/D1NmiPg0Alh9IqvPWuQhudE5rm+SfB53opPu2o3ym1w:lfVcmh39Iqvuu5EdmlrYBu2oLw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5d5fd39d5112b38d232d628aadedaf_JaffaCakes118
Files
-
5e5d5fd39d5112b38d232d628aadedaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbe5dd35d7e1077d484deece22c44ec2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogIndirectParamA
OpenIcon
SetWindowPlacement
GetDesktopWindow
SetDlgItemTextA
IsIconic
GetDlgItemInt
GetTopWindow
ChildWindowFromPoint
GetDlgCtrlID
SetWindowPos
LoadCursorA
SetClipboardData
DialogBoxParamA
GetDlgItemTextA
ole32
DoDragDrop
OleSave
OleCreateLinkFromData
oledlg
ord9
gdi32
ChoosePixelFormat
GetStockObject
GetAspectRatioFilterEx
CopyEnhMetaFileA
CombineTransform
CreateDiscardableBitmap
GdiFlush
Arc
CloseMetaFile
GdiComment
GetBkColor
Ellipse
BitBlt
advapi32
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegFlushKey
kernel32
GetACP
GetPrivateProfileIntA
PulseEvent
TlsGetValue
GetProfileStringA
WritePrivateProfileSectionA
GetProfileIntA
WriteProfileSectionA
GetProcAddress
GlobalFree
CloseHandle
OpenMutexA
VirtualAlloc
SetEvent
GetStartupInfoA
QueryPerformanceCounter
GetPrivateProfileSectionNamesA
IsBadCodePtr
WritePrivateProfileStructA
GetModuleHandleA
msvcrt
__set_app_type
_controlfp
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__fmode
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ