Static task
static1
Behavioral task
behavioral1
Sample
5f36e90e5a629e9304ac55bd990a1f9f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f36e90e5a629e9304ac55bd990a1f9f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f36e90e5a629e9304ac55bd990a1f9f_JaffaCakes118
-
Size
49KB
-
MD5
5f36e90e5a629e9304ac55bd990a1f9f
-
SHA1
01280ccc8fe23fef878b56b4b7b3a5f813620926
-
SHA256
b03627aefdec10410e59afdad5856fcf61ef7749310904ad81a00525247d5fb5
-
SHA512
d9052dcf59e1b06000591de858970fb0f91d5d4218283d5fd3a207cab08d09590f95b52411f5ef1fc23fd2cf80379af4cbdba5b5c389fbb75125780c0a9cf047
-
SSDEEP
768:8vWVPYW5tbi1G1x4nIHELNh8CthQiDUtrEgFqkcrg:8IPYW5tecx4nIkL7RtDUtYP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f36e90e5a629e9304ac55bd990a1f9f_JaffaCakes118
Files
-
5f36e90e5a629e9304ac55bd990a1f9f_JaffaCakes118.exe windows:5 windows x86 arch:x86
f00020b2314c31b9a88795bb5ade830b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetModuleHandleA
LoadLibraryA
GetProcessHeap
GetProcAddress
user32
GetForegroundWindow
GetKeyboardLayout
GetMenu
GetMenuState
GetSubMenu
GetSystemMetrics
GetWindowLongW
IsClipboardFormatAvailable
GetFocus
LoadIconW
MessageBeep
MessageBoxW
OpenClipboard
PostMessageW
RegisterClassExW
SendMessageW
SetActiveWindow
SetWindowTextW
TranslateAcceleratorW
TranslateMessage
wsprintfW
GetDesktopWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DestroyWindow
DefWindowProcW
CloseClipboard
CheckMenuItem
CharNextW
IsIconic
comdlg32
CommDlgExtendedError
FindTextW
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
ReplaceTextW
PrintDlgExW
PageSetupDlgW
ChooseFontW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
init1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
init2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
init3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
init4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
init5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 610B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ