Static task
static1
Behavioral task
behavioral1
Sample
5e3d73dde07dbaeb52fef1379583a080_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e3d73dde07dbaeb52fef1379583a080_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e3d73dde07dbaeb52fef1379583a080_JaffaCakes118
-
Size
48KB
-
MD5
5e3d73dde07dbaeb52fef1379583a080
-
SHA1
7eda9bd789a351f9bebb0e75b9a8dcb6a64eb9b1
-
SHA256
17929c74e7601de6fec9bc240139525304c73bb55fbf8892f689287e35579c46
-
SHA512
31d90ebdbe2fdd408e3d2ca2f4ed082832bd121c572292287b7edf3824a046e0d9cca48fa70af01c10cb772fb1b81cbd4eb783c6f8c669925f1564fda1efb5e7
-
SSDEEP
768:DfYTRAH364fN0I5q8NfiFgVwaNNHDXgCAvePmPkziqRDhEBakJP3T:LYTOH364V0lIfUgWaN841+bP3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e3d73dde07dbaeb52fef1379583a080_JaffaCakes118
Files
-
5e3d73dde07dbaeb52fef1379583a080_JaffaCakes118.exe windows:5 windows x86 arch:x86
1bd07c05b16700cc747e4e838d98abe5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptReleaseContext
kernel32
OpenMutexW
shlwapi
PathCombineW
PathFileExistsW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfW
user32
DispatchMessageA
DrawIcon
GetClassNameA
GetCursorPos
GetDlgItemTextA
GetIconInfo
GetKeyboardState
GetWindowThreadProcessId
LoadCursorA
OpenWindowStationA
PeekMessageA
Sections
.wtij Size: 39KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dkhyv Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dyp Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ