Static task
static1
Behavioral task
behavioral1
Sample
5edacf68bbeddb6051ed320961b02d9b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5edacf68bbeddb6051ed320961b02d9b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edacf68bbeddb6051ed320961b02d9b_JaffaCakes118
-
Size
427KB
-
MD5
5edacf68bbeddb6051ed320961b02d9b
-
SHA1
0fd46e8fa5f2ecc49cc1029791c77a9039aab091
-
SHA256
17a3f082763ebc35d20e5b7f112afb3bdfa2c34bb9b447c27063ba54879244d7
-
SHA512
fd7dd20d1d1cdf70e1d9e1a5257d30a0f592a8be33b0c2aac38222ab48336e8fc696239e4326df5e9c78d98be4842c6f575d83128f797b5897d259b90e46ce6c
-
SSDEEP
6144:acwuO3NYDsNAdnQWMAN6l5yjiqXRZtWpfvxs5kiha0Al3EsRy2LaQt:ac7O3N50BMukyHgG51A5WQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edacf68bbeddb6051ed320961b02d9b_JaffaCakes118
Files
-
5edacf68bbeddb6051ed320961b02d9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
acd5d75433a847dee807be33faa1bd6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
GlobalAddAtomA
GetLocaleInfoA
RaiseException
GetStdHandle
LockResource
LoadLibraryExA
FoldStringA
GlobalDeleteAtom
GetDriveTypeA
HeapCreate
InterlockedExchange
EnterCriticalSection
GlobalUnlock
SetConsoleCP
GlobalFree
GetACP
VirtualProtect
SetErrorMode
Sleep
user32
GetMenuItemInfoA
CharToOemBuffA
GetParent
DrawTextA
EndPaint
ValidateRect
GetFocus
GetActiveWindow
ReleaseDC
ClipCursor
DrawEdge
GetCursorPos
ShowWindow
GetWindowTextA
BeginPaint
GetWindow
GetClassNameA
SetForegroundWindow
IsIconic
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerFindFileA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ