Static task
static1
Behavioral task
behavioral1
Sample
5f1133e90d65c8464c50029910885d6e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f1133e90d65c8464c50029910885d6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f1133e90d65c8464c50029910885d6e_JaffaCakes118
-
Size
198KB
-
MD5
5f1133e90d65c8464c50029910885d6e
-
SHA1
fe7f9c23ec473732cf0e6c38153214923ca186e9
-
SHA256
7537218ddcf80963b6828860c92c1678d7aae9c4437f82cb8a13866fecbadcd0
-
SHA512
9e921469d8bb014c559042aabc32bcd8315142f980a9ed4152f063904307d5fd2fe63df71ccb1059464263604553862f76d6bd5199fc05acac91ec507ca62ef7
-
SSDEEP
3072:rp1eelDv3tPBjDKrjDR1es++BOBU9GKIyFycQHeurfnUaeAg3ahJsTC63mK6Pj:rOgtPByd8t+BejrfUzP3QJsTC63B6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f1133e90d65c8464c50029910885d6e_JaffaCakes118
Files
-
5f1133e90d65c8464c50029910885d6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c38b5d71b8a422f14ab5bb7ff45b0827
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shlwapi
wnsprintfW
kernel32
CreateFiberEx
GetTempPathW
TerminateJobObject
FileTimeToSystemTime
EnumResourceNamesW
FlushFileBuffers
LocalAlloc
SetEvent
RaiseException
advapi32
RegCloseKey
RegOpenKeyExA
EncryptFileW
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
DecryptFileW
ole32
CreateStreamOnHGlobal
CoRevokeClassObject
CreateClassMoniker
CLSIDFromString
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoResumeClassObjects
CoAddRefServerProcess
CoRegisterClassObject
CoReleaseServerProcess
GetRunningObjectTable
CoInitialize
CoDisconnectObject
CoRegisterMessageFilter
CoTaskMemAlloc
rpcrt4
UuidCreate
iphlpapi
NotifyRouteChange
user32
MsgWaitForMultipleObjects
TranslateMessage
PostThreadMessageW
DispatchMessageW
RealGetWindowClass
PeekMessageW
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ