Static task
static1
Behavioral task
behavioral1
Sample
fa690986e568f62d61f562bfe81292cd_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fa690986e568f62d61f562bfe81292cd_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa690986e568f62d61f562bfe81292cd_JaffaCakes118
-
Size
466KB
-
MD5
fa690986e568f62d61f562bfe81292cd
-
SHA1
51cab317139b72904e1dcae573e91a7997d147fe
-
SHA256
fbb68d8435857838998c6bc25af2854e56916be9e4935106264d06733286aec6
-
SHA512
3525dbd6a2d2c911250d192482973523fbb3eb5a9621b78111efdb6c7bf665f8bb60ad5a0274e502dfb21f6b4aacf926cba2101187789bd78d794327417319dd
-
SSDEEP
12288:FkFrg4vUltD8aNmeeKMyFsU085gQupIW1:FktfUbIee5FY5Tupz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa690986e568f62d61f562bfe81292cd_JaffaCakes118
Files
-
fa690986e568f62d61f562bfe81292cd_JaffaCakes118.exe windows:6 windows x86 arch:x86
f21b9f4ed04fb68076e88d1363ed51e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetW
ord17
CreatePropertySheetPageW
kernel32
CreateFileW
SetFilePointerEx
GetFileSizeEx
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
LCMapStringW
CompareStringW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetStringTypeW
CreateEventW
HeapAlloc
HeapFree
GetCommandLineW
ExitProcess
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
RtlUnwind
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetLastError
CloseHandle
WriteFile
DecodePointer
GetCPInfo
GetOEMCP
GetACP
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpyW
lstrcmpW
MulDiv
GlobalLock
GlobalUnlock
GlobalSize
GetProcAddress
GetModuleHandleW
GetStartupInfoW
GetCommandLineA
CreateThread
OutputDebugStringW
user32
GetDpiForSystem
SystemParametersInfoW
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
SetRect
InvertRect
FillRect
ClientToScreen
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
MessageBoxW
MessageBoxA
AdjustWindowRect
GetClientRect
SetWindowTextW
ShowScrollBar
SetScrollRange
SetScrollPos
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
UpdateWindow
GrayStringA
TrackPopupMenu
InsertMenuW
EnableMenuItem
CreatePopupMenu
CreateMenu
GetSystemMenu
GetSystemMetrics
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
VkKeyScanW
ToUnicode
GetFocus
CharLowerBuffW
CharUpperBuffW
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamW
IsWindowVisible
SetWindowPos
ShowWindow
CreateWindowExW
RegisterClassW
PostQuitMessage
DefWindowProcW
PostMessageW
SendMessageW
wsprintfW
LoadStringW
LoadIconW
gdi32
TextOutW
MoveToEx
GetTextMetricsW
SetTextColor
SetBkColor
SelectObject
LineTo
TranslateCharsetInfo
GetStockObject
EnumFontFamiliesW
DeleteObject
CreateSolidBrush
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
ExtTextOutW
advapi32
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyW
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ