Static task
static1
Behavioral task
behavioral1
Sample
5feafa0700ecee329b4aa046fea153ea_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5feafa0700ecee329b4aa046fea153ea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5feafa0700ecee329b4aa046fea153ea_JaffaCakes118
-
Size
113KB
-
MD5
5feafa0700ecee329b4aa046fea153ea
-
SHA1
c488e0b4561fe722671d49237e687430c1a549ff
-
SHA256
3b22fb459a63672f7f108324e13212b68878359454b0cf626e56f11166803c74
-
SHA512
4d007b593b3e91646bf6ce27c247b51dca32d40972d33f13f314dab564ff8b4607cc196f560c68fb9bcbcd0c8818fcf965be963a02df0cadc804472faa9d3ecf
-
SSDEEP
1536:Jutj7TPy4biG2dIPviC5i0xntnW6glEPexTKzcObBZCmyHnG7GJ8cpWo2G84gTKc:Ju3brS6iGi4tnrtPpNmJ8aWo2G84BXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5feafa0700ecee329b4aa046fea153ea_JaffaCakes118
Files
-
5feafa0700ecee329b4aa046fea153ea_JaffaCakes118.exe windows:5 windows x86 arch:x86
da8c95f773a215cabc4f6147390a4f9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetSystemMetrics
GetParent
CharNextA
TranslateMessage
kernel32
CopyFileA
GetCurrentThread
GetCurrentProcess
RemoveDirectoryA
GetDriveTypeA
GetTickCount
GetModuleHandleW
DeleteFileW
SetCurrentDirectoryA
lstrlenW
GlobalFindAtomA
GetThreadLocale
lstrcmpiW
DeleteFileA
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
MulDiv
GetCurrentThreadId
GetProcessHeap
GetCommandLineA
GetOEMCP
GetCommandLineW
GetACP
lstrlenA
GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
lstrcmpiA
GetConsoleOutputCP
RemoveDirectoryW
lstrcmpA
GlobalFindAtomW
GetVersion
GetWindowsDirectoryA
VirtualAlloc
VirtualFree
gdi32
SetStretchBltMode
GetObjectA
CreateFontIndirectA
DeleteObject
GetDeviceCaps
GetStockObject
CreatePalette
PatBlt
RestoreDC
SetMapMode
RectVisible
SetTextColor
CreateCompatibleDC
GetTextMetricsA
CreatePen
LineTo
SelectObject
SaveDC
SetTextAlign
GetClipBox
DeleteDC
CreateSolidBrush
GetPixel
SetPixel
SelectPalette
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ