Static task
static1
Behavioral task
behavioral1
Sample
5f017c6b74988b3ab5f41f7029778e7d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f017c6b74988b3ab5f41f7029778e7d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f017c6b74988b3ab5f41f7029778e7d_JaffaCakes118
-
Size
43KB
-
MD5
5f017c6b74988b3ab5f41f7029778e7d
-
SHA1
ff94af4a43da483745393d31571b58c200fad960
-
SHA256
f38995c410c885ae11c5bf245696c70cc114e2922fcebf6d631cf3c52759d35f
-
SHA512
d2f7a89d33e5879ad6e40742b0caa53defac9f5ab5f56ed61c0ccb8fd173be646969823816e68b099125f7a7bf16bcd0acdcbe3ab05e14265063961cfd4ade34
-
SSDEEP
768:/8b7xoX2Ghkp26Oelt1pWnwV0WARjmhg35z8z0StrxOB8dRHLa2hf7PYIGwq:Ub+H42Glt1byGSJz8zNxfFEFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f017c6b74988b3ab5f41f7029778e7d_JaffaCakes118
Files
-
5f017c6b74988b3ab5f41f7029778e7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
91c180b8598c287746ee79f00a2e5613
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommBreak
CloseHandle
CopyFileW
EnumSystemLocalesA
ExitProcess
FindFirstFileW
GetBinaryTypeA
GetCurrentProcess
GetFullPathNameA
GetHandleInformation
GetSystemPowerStatus
GetTapeParameters
HeapCompact
HeapLock
HeapWalk
LocalReAlloc
OpenProfileUserMapping
OpenSemaphoreA
PrepareTape
QueueUserAPC
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetProcessAffinityMask
SetTapeParameters
SleepEx
SuspendThread
UpdateResourceA
WaitCommEvent
user32
BlockInput
CharPrevExA
CharUpperBuffW
ChildWindowFromPointEx
CloseWindow
CreateIconFromResourceEx
DdeCreateStringHandleA
DdeSetQualityOfService
DefFrameProcW
DefMDIChildProcW
DestroyIcon
DlgDirSelectComboBoxExA
GetCaretBlinkTime
GetDesktopWindow
GetDoubleClickTime
GetMessagePos
GetPriorityClipboardFormat
GetThreadDesktop
GetWindowWord
InsertMenuA
ModifyMenuA
OpenClipboard
RealChildWindowFromPoint
RemoveMenu
SendMessageA
SetMenuItemInfoW
WaitMessage
gdi32
CloseFigure
CombineRgn
CreateColorSpaceW
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateHalftonePalette
EnumFontFamiliesExW
ExtEscape
GetBoundsRect
GetCharABCWidthsFloatA
GetKerningPairs
GetMetaFileBitsEx
GetPixelFormat
GetSystemPaletteEntries
GetWindowExtEx
OffsetClipRgn
PlayEnhMetaFile
PolyBezierTo
PolylineTo
ResetDCW
SetBoundsRect
SetICMMode
SetMagicColors
SetViewportOrgEx
SetWinMetaFileBits
StartDocW
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ