Static task
static1
Behavioral task
behavioral1
Sample
52a636fe97b3606b4f2524a0e1fca90d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
52a636fe97b3606b4f2524a0e1fca90d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52a636fe97b3606b4f2524a0e1fca90d_JaffaCakes118
-
Size
3.0MB
-
MD5
52a636fe97b3606b4f2524a0e1fca90d
-
SHA1
5b295b19b8b0187149455d1016f7b6eabfd7ecd1
-
SHA256
a88776bf9f849e309fca5f0d37e62bc94ea61bc5366b9998fa56b3462cb3452d
-
SHA512
c8cb7d7babe54deb17566375d8a58308226b91a46e481167137d4424f3b79b9472254c457860a35d76d9a62a44cac2f796f9ed318439d331307ed473d88ddb1b
-
SSDEEP
49152:NIP+qAGosVbDok6hsNAdZGnB5CHosvY1FxOHQNe27T8fd+8xUfKf1EAps7Wjt8AB:No+qjosVbusuWB8HW02f8fd+8xUfKf1j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52a636fe97b3606b4f2524a0e1fca90d_JaffaCakes118
Files
-
52a636fe97b3606b4f2524a0e1fca90d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c61a08eb0a71fd938fa40cf0ced72827
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess
user32
MessageBoxA
gdi32
CreateCompatibleDC
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
VariantClear
comctl32
InitCommonControlsEx
winmm
timeGetTime
ddraw
DirectDrawEnumerateA
dsound
ord11
comdlg32
GetOpenFileNameA
dinput
DirectInputCreateW
ws2_32
select
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
stxt774 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt371 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE