Static task
static1
Behavioral task
behavioral1
Sample
5642b374454dad18d3b8de264ddaa27a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5642b374454dad18d3b8de264ddaa27a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5642b374454dad18d3b8de264ddaa27a_JaffaCakes118
-
Size
257KB
-
MD5
5642b374454dad18d3b8de264ddaa27a
-
SHA1
01e68951aceaad28cb0d449b4675f66e157908be
-
SHA256
b000a363b25e0d2d8244af075aa04e3b12792f33f361945897a6c36c9b6c8d2b
-
SHA512
7017806d290753eb4d928e354811ec866ae710e1226ad60b9b2bb6e57e266a4690b62a7a4e78c5073f3ce8016364c77995e7bea73012afa3a0ef9f0ce376e1a7
-
SSDEEP
3072:WNXtKxjP4J2O7jdOh4BmWrzVUWGT+rcDf2pStP26UeMUNOJ7uJ15jJPfahrBzx3u:WNdYjPArzqT+maStP21Ug7Q1jf2zxIf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5642b374454dad18d3b8de264ddaa27a_JaffaCakes118
Files
-
5642b374454dad18d3b8de264ddaa27a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b58dc48a2042605d45534f760d1cbf67
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
LoadCursorA
GetWindowLongA
DefWindowProcW
DialogBoxParamA
GetWindowLongW
KillTimer
GetDlgItem
ShowWindow
kernel32
InitializeCriticalSection
GetFileType
GetVersionExA
ExitProcess
GetTempFileNameW
GetSystemInfo
GetTickCount
DisableThreadLibraryCalls
UnmapViewOfFile
UnhandledExceptionFilter
LCMapStringA
GetModuleHandleA
InterlockedCompareExchange
GetCurrentProcessId
HeapReAlloc
TlsAlloc
GetCurrentProcess
GetEnvironmentVariableA
GetProcAddress
lstrcpynW
HeapAlloc
GetDiskFreeSpaceA
CopyFileA
VirtualAlloc
EnterCriticalSection
LoadLibraryA
GetTempPathW
FileTimeToSystemTime
HeapDestroy
advapi32
DeregisterEventSource
OpenThreadToken
msvcrt
fflush
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ