Static task
static1
Behavioral task
behavioral1
Sample
d5ec70e8849bec66d72300d474361514_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5ec70e8849bec66d72300d474361514_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5ec70e8849bec66d72300d474361514_JaffaCakes118
-
Size
46KB
-
MD5
d5ec70e8849bec66d72300d474361514
-
SHA1
5d459d637c505747bc285abae182fcb7cf6e1531
-
SHA256
850996ce0eb79f16bb9e21f2e4d00890b36f03554b963fa547926d9e36e506fe
-
SHA512
a6bd637fe694d4c673385c91d083ea9875c7fa2c336ea93c5f65251ead10286c2c2c6af8258f2f471c0811ae132360ea4f55b5c64e39ffe813f5addc15f8e70b
-
SSDEEP
768:YOyeV8z9/oAjrRaZXjem1kYunXySgNcMl38go:YOya8zFrjlaF1gX2Wgo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5ec70e8849bec66d72300d474361514_JaffaCakes118
Files
-
d5ec70e8849bec66d72300d474361514_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbb36468f94fdb7570e3f7b8ee6c6f95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetModuleHandleA
LoadLibraryExW
CreateFileA
GetExitCodeProcess
CreateMutexA
GetPriorityClass
GlobalFree
CloseHandle
DeleteAtom
FindResourceA
TlsGetValue
lstrlenW
GetStdHandle
SetEnvironmentVariableA
SetLastError
HeapCreate
GlobalUnlock
VirtualQuery
ReleaseMutex
user32
GetDC
DispatchMessageA
CreateWindowExA
CheckRadioButton
GetDlgItem
DrawMenuBar
CallWindowProcA
SetFocus
FillRect
IsWindow
GetIconInfo
CreateMenu
DrawEdge
ntshrui
GetNetResourceFromLocalPathA
IsPathSharedA
SetFolderPermissionsForSharing
IsPathSharedW
GetLocalPathFromNetResourceA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE