Static task
static1
Behavioral task
behavioral1
Sample
f5d9f19223db7e420b05f4e202e7949c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f5d9f19223db7e420b05f4e202e7949c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5d9f19223db7e420b05f4e202e7949c_JaffaCakes118
-
Size
636KB
-
MD5
f5d9f19223db7e420b05f4e202e7949c
-
SHA1
c9bc5929d136923baab8b2fa4375c901652ec226
-
SHA256
d04e03b4514f834d734990ae5edfab0e117d111347a09324bc573851658473a3
-
SHA512
fdf2f8375a2ccfe278a93afd62854129f5de2bd316898729a1a279ae4ffa6f5b3f10e6aa18b9abeb4fc65391913af9f56842683461da0597dbd698aba169adc5
-
SSDEEP
12288:KkwQBI2ox0auZK248B7xIGJ3bGNacM+oz8JGuS4wLSlFd:KkwAh60aiIM7x5xbMLom44wmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d9f19223db7e420b05f4e202e7949c_JaffaCakes118
Files
-
f5d9f19223db7e420b05f4e202e7949c_JaffaCakes118.exe windows:4 windows x86 arch:x86
975071f5a6a268db2555874c7b1f3e60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetTickCount
GetVersion
CompareFileTime
HeapReAlloc
GetStdHandle
GetCommandLineA
GetModuleHandleA
HeapCreate
SearchPathA
GetSystemDefaultLangID
GetAtomNameA
WaitForSingleObject
CloseHandle
WaitForMultipleObjects
InterlockedExchange
GetConsoleCP
lstrlenA
SuspendThread
SetConsoleCP
GlobalUnlock
user32
InsertMenuA
CopyImage
CreateMenu
IsDialogMessage
DialogBoxParamA
DestroyMenu
CreateIcon
FindWindowA
GetKeyboardLayout
DispatchMessageA
GetCursorInfo
SetWindowPos
GetKeyState
EnableScrollBar
SetScrollInfo
InvertRect
DispatchMessageA
DrawCaption
GetDlgItem
SetPropA
MessageBoxA
CreateCursor
DragObject
advapi32
RegCreateKeyExA
RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
RegCloseKey
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ