Static task
static1
Behavioral task
behavioral1
Sample
5e4d38f4d643466aa2d772c57ee795ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e4d38f4d643466aa2d772c57ee795ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e4d38f4d643466aa2d772c57ee795ec_JaffaCakes118
-
Size
117KB
-
MD5
5e4d38f4d643466aa2d772c57ee795ec
-
SHA1
16449dcd9ffc8b37caec29db88aa4c206932f8b9
-
SHA256
86d40974e1ed94edc78a6f7f90a8539087dd3d344d44fb59053aee87fa316495
-
SHA512
1d6d68a6a76298ffab546c0790a7d865970a2b53d53305139159d56b2d19e44eedb92df6b414db55b67499a66b7d65945941e64af32b2480742dc05299a08d6d
-
SSDEEP
3072:Csq8mCO+ckN5amAtjGnNndnvyiC0crq4ljduHKTZaH8:Jv8+QtjGNnla9fjQHv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4d38f4d643466aa2d772c57ee795ec_JaffaCakes118
Files
-
5e4d38f4d643466aa2d772c57ee795ec_JaffaCakes118.exe windows:5 windows x86 arch:x86
a092873c3ef74098af2b72cf747f9bb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetPriorityClass
CreateMutexA
GetProcAddress
GetCurrentThread
GetEnvironmentStringsW
IsDebuggerPresent
GetStdHandle
CreateSemaphoreA
CreateEventA
GetCommandLineA
GetTickCount
GetEnvironmentStrings
GetCommandLineW
VirtualAlloc
GetModuleHandleA
GetCurrentProcessId
GetStartupInfoA
user32
SetWindowTextA
GetWindowDC
LoadCursorA
LoadIconA
LoadCursorFromFileA
ReleaseDC
gdi32
GetTextMetricsA
SetTextAlign
GetTextColor
AbortDoc
GetRasterizerCaps
crypt32
CertStrToNameA
msvcrt
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
memcpy
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ