Static task
static1
Behavioral task
behavioral1
Sample
52dcc64dfb415349f2b7b76d257649c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52dcc64dfb415349f2b7b76d257649c8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52dcc64dfb415349f2b7b76d257649c8_JaffaCakes118
-
Size
68KB
-
MD5
52dcc64dfb415349f2b7b76d257649c8
-
SHA1
f5284a081951b5d1615ccb97ef375e49307d218a
-
SHA256
63ae0913b1d0722ae2ee06be5da3215c2775045ec395cfa0e59d9d1c0c300ec2
-
SHA512
ac93a62bfc3428a4d5e2b6b1ffe03e9785dac4636199740a83e9aaa51a4a8c0f76293ec548670620297a6436c7e1928bdfff0b7b026a4263df21b579aae7ac36
-
SSDEEP
1536:u4xknU8XaR2q11dbD0qx4cnUqsre1x1o0kXt4sVTpAsxKy6zhEbUXxR4PxKpXO:u4xknU8O2spbx4cnUqsG1+xfjxKy6zhE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52dcc64dfb415349f2b7b76d257649c8_JaffaCakes118
Files
-
52dcc64dfb415349f2b7b76d257649c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
503826e631193ce0e2eee7ef76a96fe2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
lstrlenA
CompareFileTime
GetProfileIntA
GetTickCount
HeapReAlloc
GlobalUnlock
HeapWalk
GetVersion
InterlockedExchange
GetModuleHandleA
CloseHandle
GetStdHandle
WaitForSingleObject
FindAtomA
LoadLibraryA
VirtualProtect
GetAtomNameA
TlsFree
GetConsoleCP
TlsGetValue
user32
EnableScrollBar
LoadIconA
DispatchMessageA
InsertMenuA
GetDlgItem
ShowWindow
SetPropA
PaintDesktop
ModifyMenuA
SetWindowPos
TranslateMessage
DestroyMenu
GetScrollRange
CopyRect
EqualRect
MessageBoxA
SubtractRect
DialogBoxParamA
GetWindowTextA
GetMenu
PostMessageA
GetMenuStringA
GetSubMenu
InflateRect
PostQuitMessage
GetKeyboardLayout
CreateCaret
UpdateWindow
msi
MsiDoActionA
MsiEnumProductsA
MsiGetMode
MsiCloseHandle
MsiEnumClientsA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ