Static task
static1
Behavioral task
behavioral1
Sample
5300b2d6d57fababca62ec81f538932c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5300b2d6d57fababca62ec81f538932c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5300b2d6d57fababca62ec81f538932c_JaffaCakes118
-
Size
120KB
-
MD5
5300b2d6d57fababca62ec81f538932c
-
SHA1
f3c17cca983601c6c8ddf24adef0e5a1997d73ee
-
SHA256
f35aecc6caf91a496a541b7f2db54e4fdf1b4a6b88c7f14a1cbe574e13782df1
-
SHA512
fbe24c25a1eae571c989809a7a72fca4a0991936939f96c595164b6659ddcf22c6a2b0485fc11a8901641f35710076ebdbf62b24da65985bcb19f77c5a0c5521
-
SSDEEP
3072:6i4+XczM0to02rqLzcemu7bF/vXpwpIyeDDckwWTrA:Q+szBCrq/tmUZnXpwGdzPA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5300b2d6d57fababca62ec81f538932c_JaffaCakes118
Files
-
5300b2d6d57fababca62ec81f538932c_JaffaCakes118.exe windows:4 windows x86 arch:x86
410aea752fc7e0c1a28b8029768b7d4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageW
DrawIcon
SetMenuItemBitmaps
GetMenuState
GetClientRect
DispatchMessageW
GetWindowLongW
SetMenu
EndDialog
GetWindow
IsWindow
SetWindowContextHelpId
GetParent
PostQuitMessage
SetTimer
GetSysColorBrush
ValidateRect
IsWindowEnabled
LoadBitmapW
PostMessageW
IsIconic
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
GetNextDlgGroupItem
GetCursorPos
GetFocus
SetWindowPos
ModifyMenuW
IsWindowVisible
InvalidateRgn
GetSystemMetrics
DestroyWindow
EnableMenuItem
GetDlgItem
SetActiveWindow
GetDesktopWindow
MapDialogRect
EnableWindow
CheckMenuItem
CreateWindowExW
GetKeyState
UpdateWindow
MessageBeep
GetNextDlgTabItem
GetActiveWindow
TranslateMessage
oleacc
LresultFromObject
CreateStdAccessibleObject
comctl32
InitCommonControlsEx
oledlg
OleUIBusyW
kernel32
GetModuleFileNameW
ReleaseMutex
ExpandEnvironmentStringsW
GetUserDefaultUILanguage
LockResource
SetCurrentDirectoryW
WideCharToMultiByte
lstrcmpW
FreeEnvironmentStringsA
LoadResource
GlobalLock
InterlockedExchange
CloseHandle
GetPrivateProfileStringW
SizeofResource
CreateProcessW
CreateMutexW
GetLastError
CompareStringA
EnumResourceLanguagesA
LoadLibraryW
ExitProcess
lstrlenW
TerminateProcess
GetProcAddress
GetModuleHandleW
GlobalAlloc
FreeLibrary
FindResourceW
WaitForSingleObject
MultiByteToWideChar
GetLocaleInfoW
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ