Static task
static1
Behavioral task
behavioral1
Sample
52100454c4331365b07b70f611aae64d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52100454c4331365b07b70f611aae64d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52100454c4331365b07b70f611aae64d_JaffaCakes118
-
Size
145KB
-
MD5
52100454c4331365b07b70f611aae64d
-
SHA1
50b57b624de0abaaee016c0124244ea16ce97e4d
-
SHA256
07528718b79b3e901e1dd69baec9e4d94ab9ff5175b3a563f2ec4d313172c0af
-
SHA512
ab4695cc374e723706450ab6e521e012785dfe5d36c9b03b9130700484185485f6d508f2d69dc12880f12afa492ca0867c65d71cda8b6433e8c97ef96b9a83f5
-
SSDEEP
3072:VzMf2NXjZLxVZVRMCxCvpMylBRrNr/I6gMEsRSP1+oDfN:Vzfpx5RJkvpMOBRZrQ6gMEs09+y1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52100454c4331365b07b70f611aae64d_JaffaCakes118
Files
-
52100454c4331365b07b70f611aae64d_JaffaCakes118.exe windows:4 windows x86 arch:x86
5da17c9119de7878dade677aa8b9b86c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
FatalExit
GetFileType
CopyFileExW
FindAtomW
GetPriorityClass
ReadFile
ExitThread
DeleteFileW
GlobalFree
ExitProcess
AddAtomW
AddAtomA
GetLastError
ReadFile
FreeResource
FatalExit
AddAtomA
ExitThread
GetPriorityClass
CopyFileExW
DeleteFileA
CreateDirectoryA
OpenFile
GetLocalTime
GetCommandLineA
FindAtomA
GlobalFree
user32
DialogBoxParamA
AppendMenuA
InsertMenuA
CopyIcon
LoadCursorA
GetDlgItem
CalcMenuBar
AppendMenuW
DrawIconEx
GetWindowTextLengthA
CopyImage
GetWindowTextA
EndDialog
IsMenu
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 106KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 1024B - Virtual size: 641B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ