Static task
static1
Behavioral task
behavioral1
Sample
f5e30d0ccaf13614664b929ae1c4cdc6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5e30d0ccaf13614664b929ae1c4cdc6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5e30d0ccaf13614664b929ae1c4cdc6_JaffaCakes118
-
Size
18KB
-
MD5
f5e30d0ccaf13614664b929ae1c4cdc6
-
SHA1
c7c6a0fc8d35fa20f868e062edb28478a1a19ac7
-
SHA256
5932ba8731ace9a30078001af10e955a10a86606dbb80b5832f8137be56746a3
-
SHA512
aac8af5183912da352f82776c33ba8ac3aaf6ab67d6ffc80093d58b836ac3895a559235b97a23fa047df602ca50d0d9b3ab5aa274d84ca0ad285cfeac8f84381
-
SSDEEP
384:JJTPsH/mqncSbJS/oh4HHHDnnnR7RRRRRRRRRDRRRRRRRcafLWO8KBxo:/uJF4HHH2afjfo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e30d0ccaf13614664b929ae1c4cdc6_JaffaCakes118
Files
-
f5e30d0ccaf13614664b929ae1c4cdc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
7f9d912e1adf28a065dfc5740bfbebe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommConfig
CreateHardLinkA
HeapCreate
GetTimeFormatA
GetCurrentProcessId
GetLogicalDrives
HeapDestroy
WaitForSingleObject
CreateFileMappingA
LoadLibraryExA
GetACP
InterlockedExchange
GetEnvironmentStringsA
VirtualProtect
GetModuleHandleA
GetStdHandle
DeleteAtom
IsDebuggerPresent
GetProcessVersion
GetCurrentThread
GetTapeStatus
user32
GetFocus
EndPaint
ShowWindow
GetParent
SetActiveWindow
GetDlgItem
GetClassNameA
DrawTextA
FillRect
GetWindow
GetTitleBarInfo
BeginPaint
FrameRect
GetWindowTextLengthA
SetForegroundWindow
DragDetect
ReleaseDC
GetCursorPos
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyA
RegFlushKey
RegEnumKeyA
RegCloseKey
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ