Static task
static1
Behavioral task
behavioral1
Sample
5f350541cd00d27ccd4deec57e56fd7e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f350541cd00d27ccd4deec57e56fd7e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f350541cd00d27ccd4deec57e56fd7e_JaffaCakes118
-
Size
16KB
-
MD5
5f350541cd00d27ccd4deec57e56fd7e
-
SHA1
b1a2bfbeb7ff03535773dccdc6219ee1c99c6453
-
SHA256
8aaced072b50bc731951a70e12b38b9c3e628309b334cd572745fe0643a290d2
-
SHA512
1e18619484e4bb378b647685aace92f57f86591180918918fbb1c8637df376adb6be20d51f97c015f31bf436fb17f608cba7c8db12af0578f0662b5b33d74bd5
-
SSDEEP
192:3LUgQ4bWUhYtFiuCXhI081Jxa9t1ngzVKWZLHLABszjR/roEq8ZRFlzbF:bce6FM20J9t1gJKWZLLAKnBsWZRFlzp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f350541cd00d27ccd4deec57e56fd7e_JaffaCakes118
Files
-
5f350541cd00d27ccd4deec57e56fd7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ca4d93a1ce7ebc0e7ee0524a71ac967
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelWaitableTimer
SetEvent
GetExitCodeThread
GetLargestConsoleWindowSize
VirtualAlloc
GetThreadTimes
GetThreadPriority
GetModuleHandleA
AddAtomA
CreatePipe
GetDefaultCommConfigW
GetUserDefaultLangID
TlsFree
GetThreadLocale
CompareStringA
GetConsoleCP
GetOEMCP
TlsGetValue
IsDBCSLeadByte
ReleaseMutex
CreateMutexA
user32
IsWindowVisible
GetWindow
GetDC
IsIconic
GetWindowTextLengthA
ReleaseDC
InvalidateRect
GetClassInfoExA
ShowWindow
GetSystemMetrics
RegisterClassA
ReleaseDC
GetForegroundWindow
GetActiveWindow
CloseWindow
GetFocus
GetClassNameA
ValidateRect
GetWindowTextA
tapi32
MMCSetPhoneInfo
MMCSetLineInfo
MMCInitialize
MMCSetServerConfig
MMCShutdown
lpk
LpkInitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ