Static task
static1
Behavioral task
behavioral1
Sample
5e7f15b1eb1e56e9d9dec24c0dc60756_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e7f15b1eb1e56e9d9dec24c0dc60756_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e7f15b1eb1e56e9d9dec24c0dc60756_JaffaCakes118
-
Size
395KB
-
MD5
5e7f15b1eb1e56e9d9dec24c0dc60756
-
SHA1
a3ffa68735a4b9aae4c00f4a8626db265d5a8664
-
SHA256
e7d0dbf77dcdcdf5f5c9791fab19fdf3f55dccf5a99d027e8ee761859539c820
-
SHA512
4a05b7f4b5ff9d88dc0f4dd3fd275692fc24a96f43da5bdd35655e5ff6eafec3eb896b77fccc13a23a9656be3eadec23acd354748bdc552418923c65c54b83ac
-
SSDEEP
6144:IVLltPEjaRAzDR9PYLbIdxS16otifWgRWI05xCfwXQOSR9t0EeyifDu:aptmkLUdgtirXLaQOkK7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e7f15b1eb1e56e9d9dec24c0dc60756_JaffaCakes118
Files
-
5e7f15b1eb1e56e9d9dec24c0dc60756_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d6e99fe2abf7d5962c248b92dceaebd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetLastError
VirtualAlloc
Sleep
SuspendThread
GetSystemTime
CloseHandle
FindResourceA
GetVersion
LocalLock
LoadLibraryA
CreateThread
FreeResource
LocalAlloc
LockResource
LoadResource
FindResourceExA
GetProcAddress
VirtualQuery
SetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualFree
VirtualProtect
LocalFree
SizeofResource
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW
user32
EnableWindow
LoadCursorA
GetDesktopWindow
MessageBoxA
FindWindowA
gdi32
DeleteObject
advapi32
LsaAddAccountRights
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 328KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ibss Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE