Static task
static1
Behavioral task
behavioral1
Sample
fb466ec779e2c70d94c8cb7d928ecd28_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb466ec779e2c70d94c8cb7d928ecd28_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb466ec779e2c70d94c8cb7d928ecd28_JaffaCakes118
-
Size
100KB
-
MD5
fb466ec779e2c70d94c8cb7d928ecd28
-
SHA1
74ba0d6761929b019ff6ae8a92a9ede6803d7c4b
-
SHA256
157de601905ac040bcab9877a3cc950f283d12877ff8df4d4b8a7c7a23d56a5b
-
SHA512
8d3aa37fa744edb772201c43bae739f6e1aeeca049166bfb53dd04a3f0ee019aa92b5389db1324aff1a361bffb7af7769b17c16a5bdc1143d3940fc745692573
-
SSDEEP
1536:kG+jPWY1L6loQ66e0QRFn6wLJVP7rMDmrAggOtTVtUjyJHdewB0tw:5+LWYoloVSe6wLzXMDmrALG0GJH4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb466ec779e2c70d94c8cb7d928ecd28_JaffaCakes118
Files
-
fb466ec779e2c70d94c8cb7d928ecd28_JaffaCakes118.exe windows:4 windows x86 arch:x86
4636f6c65600e246c39716709c3bf486
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetCPInfo
Sleep
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeW
user32
PostQuitMessage
BeginPaint
GetClientRect
DrawTextA
EndPaint
BlockInput
KillTimer
SetFocus
LoadIconA
LoadCursorA
RegisterClassExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowA
SetForegroundWindow
keybd_event
MessageBoxA
SendMessageA
ShowWindow
GetClassNameA
EnumWindows
CreateWindowExA
gdi32
GetStockObject
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ