Static task
static1
Behavioral task
behavioral1
Sample
5ec6aef6b98870cc8d24fd3a778921e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ec6aef6b98870cc8d24fd3a778921e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ec6aef6b98870cc8d24fd3a778921e7_JaffaCakes118
-
Size
26KB
-
MD5
5ec6aef6b98870cc8d24fd3a778921e7
-
SHA1
eb132c7645ef6ad48c9818c485068d55ac013b48
-
SHA256
c73fd8b80ec55247fd186f73bd6df13331c167a769b2d97fe08f4606c9fbbe43
-
SHA512
a7a395dd58c76a1a5c7e1468acbd721a2826b6825c5d6f6eb9f6f988854d153f7d571617aa8fb4e507500514b016c777424f984680ffde49d3dd0eda56855351
-
SSDEEP
384:61hDIV602PzHj20mHFZ4B/nDhZ8rVmE1CXmw8aYyrIwy72nHyfbbh9ErnQ:aDIriVw4B/joF1C7MwOdb1ernQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ec6aef6b98870cc8d24fd3a778921e7_JaffaCakes118
Files
-
5ec6aef6b98870cc8d24fd3a778921e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
28ce109d0ed1971206e35e017b97af1d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthA
OpenMutexW
FindAtomW
BuildCommDCBA
WritePrivateProfileStringA
GetCommTimeouts
BindIoCompletionCallback
GetCommModemStatus
CreateSocketHandle
TerminateThread
FatalAppExitA
SetConsoleWindowInfo
CreateWaitableTimerA
user32
LockWindowUpdate
GetWindowRgn
CharLowerBuffA
RegisterWindowMessageA
GetWindowRgnBox
DisableProcessWindowsGhosting
GetWindowTextLengthW
PostThreadMessageW
AppendMenuA
RegisterClassA
EnumPropsW
MessageBoxIndirectW
GetKeyboardType
ChangeDisplaySettingsW
GetRawInputBuffer
Sections
.text Size: 23KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ