Static task
static1
Behavioral task
behavioral1
Sample
5459b97f734ee5e1ab4e8d9809f6b027_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5459b97f734ee5e1ab4e8d9809f6b027_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5459b97f734ee5e1ab4e8d9809f6b027_JaffaCakes118
-
Size
637KB
-
MD5
5459b97f734ee5e1ab4e8d9809f6b027
-
SHA1
de589ad5fb531b8313523e3b5897729d4aa30598
-
SHA256
f5d00f6068195964f8aff65988b339c427931220ac0a1f79065b438986886c9d
-
SHA512
450123aa688e2b63b46c5e1a124a34a198e0303a606f5dac1715fde74387ecb3c7b718be8e8c20308bccf952c742cadb17eb920368ebbcc0042ab205c9910a21
-
SSDEEP
12288:FR1+jSpEoRzUA4Usj5sWUznwnprl76IkNjfCJaqYYNwJAULO4ywEWYd0:fEjSpEoRzU3UEgwnpR76IkEaMNwJAJel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5459b97f734ee5e1ab4e8d9809f6b027_JaffaCakes118
Files
-
5459b97f734ee5e1ab4e8d9809f6b027_JaffaCakes118.exe windows:4 windows x86 arch:x86
0929c26b9ee24590cbb4194bc3a28537
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntA
GetACP
HeapWalk
WaitForSingleObject
TlsGetValue
GlobalUnlock
CloseHandle
GetStdHandle
VirtualProtect
HeapReAlloc
lstrlenA
TlsFree
GetTickCount
GetConsoleCP
CompareFileTime
FindAtomA
GetVersion
InterlockedExchange
GetAtomNameA
LoadLibraryA
GetModuleHandleA
user32
SubtractRect
GetMenu
InsertMenuA
CreateCaret
ModifyMenuA
InflateRect
TranslateMessage
ShowWindow
SetPropA
MessageBoxA
EqualRect
GetScrollRange
GetDlgItem
GetKeyboardLayout
DispatchMessageA
SetWindowPos
GetWindowTextA
UpdateWindow
DialogBoxParamA
EnableScrollBar
LoadIconA
PostQuitMessage
GetMenuStringA
PaintDesktop
PostMessageA
DestroyMenu
CopyRect
msi
MsiEnumProductsA
MsiDoActionA
MsiEnumClientsA
MsiCloseHandle
MsiGetMode
clbcatq
CoRegCleanup
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ