Static task
static1
Behavioral task
behavioral1
Sample
5aef6e2c996d3afa5067ca251f397b47_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5aef6e2c996d3afa5067ca251f397b47_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5aef6e2c996d3afa5067ca251f397b47_JaffaCakes118
-
Size
276KB
-
MD5
5aef6e2c996d3afa5067ca251f397b47
-
SHA1
d3d98585e02436ee7794a060fe0b9e35a0bb5c5a
-
SHA256
f246cdd01c0ef726cc32481091877cf9ab212e9d20d0c963ccf268de84050b08
-
SHA512
4b299298c2d2dccefae223fcd9387fc993708b7ef95ff1e5b3c7bf7d978d8fbf0f54dd94c7dfdb32f0646ab0df1ef59a1c1009964e685418e317ac7d9a70a846
-
SSDEEP
6144:5vPOcczKy9w9Tn2vGfA+YDETkOHu3gbVQhv2g6a0FzDCs7vBXk:jcz9MLoGo+YDuksDYyzGsLBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5aef6e2c996d3afa5067ca251f397b47_JaffaCakes118
Files
-
5aef6e2c996d3afa5067ca251f397b47_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f186b88350741cdc370e181eadd3771
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetLastError
InterlockedExchange
GlobalAddAtomW
GetProcessHeap
GetCurrentDirectoryW
LoadResource
EnumResourceNamesW
EnumResourceTypesW
HeapAlloc
SizeofResource
FindFirstFileW
GetProcAddress
LocalFree
RaiseException
GlobalFree
EnumResourceLanguagesW
EnumResourceNamesA
LockResource
GetModuleHandleW
GetCommandLineW
CloseHandle
FindNextFileA
GetDateFormatA
FindResourceExW
LoadLibraryA
MultiByteToWideChar
FormatMessageW
SetLastError
FindFirstFileA
HeapFree
Sleep
user32
CharNextA
wsprintfW
GetMessageA
LoadStringA
IsWindowVisible
PostThreadMessageA
CharUpperA
DispatchMessageA
GetWindowThreadProcessId
GetWindowTextA
PeekMessageA
EnumWindows
SetTimer
KillTimer
MessageBoxA
wsprintfA
Sections
.text Size: 145KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ