Static task
static1
Behavioral task
behavioral1
Sample
5e8d40e14920bc5460190eb563d82c2e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e8d40e14920bc5460190eb563d82c2e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e8d40e14920bc5460190eb563d82c2e_JaffaCakes118
-
Size
14KB
-
MD5
5e8d40e14920bc5460190eb563d82c2e
-
SHA1
033675faa1981a518099328cbd759b89317146e0
-
SHA256
283dd498f973656fd6840a666b0857cf4376ff4e8bdeb0bf69107216555a5a9e
-
SHA512
40ced763163dab33c559dd5ab64f1b74d30dcbf03a0b0f3b225afe573a3ad4b331bf6ffe25c47083a9727b4899b365f012a70fe7ac31355e36724e7e3200da5e
-
SSDEEP
192:hd5kl/AbKc7h20k0IAk/ASVo5unSb06kUVTg0XD5mpDdax:hk/q208/AQo5uSb06k+T7FeEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e8d40e14920bc5460190eb563d82c2e_JaffaCakes118
Files
-
5e8d40e14920bc5460190eb563d82c2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c3531a4c8195d5ed77bf129a0f93e43e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
lstrcatA
SetEndOfFile
GetUserDefaultLCID
VirtualAlloc
AllocConsole
FindResourceExA
GetSystemDefaultLCID
SwitchToThread
IsDBCSLeadByte
GetCommandLineA
TlsGetValue
lstrcpyA
TlsFree
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleW
TlsSetValue
GetThreadLocale
GetFileAttributesW
DeleteFileA
user32
InvalidateRect
GetWindowTextA
GetClassInfoExA
GetWindowTextLengthA
IsWindowVisible
GetActiveWindow
ValidateRect
CloseWindow
GetSystemMetrics
GetDC
IsIconic
ShowWindow
GetWindowLongA
RegisterClassA
GetWindow
ReleaseDC
ReleaseDC
GetForegroundWindow
GetFocus
version
VerInstallFileA
VerFindFileA
GetFileVersionInfoA
VerLanguageNameA
GetFileVersionInfoSizeA
VerQueryValueA
msctf
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ