Static task
static1
Behavioral task
behavioral1
Sample
fa9133a33a2176c1573b574b5f2bb2b9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa9133a33a2176c1573b574b5f2bb2b9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa9133a33a2176c1573b574b5f2bb2b9_JaffaCakes118
-
Size
183KB
-
MD5
fa9133a33a2176c1573b574b5f2bb2b9
-
SHA1
59e29d1847d88184fc2550534b859f3a9a79dd75
-
SHA256
818421e7722727491e4cdc20a5364113a59e8ac3d93b75fdbb25650e8b38b3be
-
SHA512
f96b90dba29ce00e1d3834a22c651cf9af7ac35eb5df315062e1768d9502f82b1d8193db7cd16f5f4299279130b2de466f23eb5cf8ac1f6c73961dec8368c9d2
-
SSDEEP
3072:/cbH3LGnx9QFoc9y6RFs2bqVtUsExNYI7xUVgurBLaOeh5CGwGnA:/cbH3e3c9Rs2bqYlZd+hrJ9eC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa9133a33a2176c1573b574b5f2bb2b9_JaffaCakes118
Files
-
fa9133a33a2176c1573b574b5f2bb2b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
12c0ffe8c1a8106f80a44b2dddb8f420
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleNumberOfCommandsW
RtlZeroMemory
VirtualAlloc
user32
ScrollWindow
RegisterClassExW
IMPGetIMEW
PrivateExtractIconsW
GetMenuInfo
GetInputDesktop
Sections
CODE Size: 9KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 170KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ