Static task
static1
Behavioral task
behavioral1
Sample
fad7d7a8f365abec6f3db2eaf5cc0a9f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fad7d7a8f365abec6f3db2eaf5cc0a9f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fad7d7a8f365abec6f3db2eaf5cc0a9f_JaffaCakes118
-
Size
28KB
-
MD5
fad7d7a8f365abec6f3db2eaf5cc0a9f
-
SHA1
c667f11013b963c8865be2e6c6e4f1b96257af71
-
SHA256
98bb67388928b4f8fcae5b670062fbe619a0253a5cf24d71063a4da80ba36127
-
SHA512
d935e3729c464991c65846f7a2deb3bf2d0ccd0233efc705026dc12ba2528ece363bf15bf784fa00d3a92c16896853a7ff56c2a2e1744e9264e2db3358ed6c5e
-
SSDEEP
192:1rtSWVinjzJCdHEN8CKrQX3VvzVMmZBdZDNWhGx8rGbrsqV9RyyN5LwG7nFojY/a:rgzJAPtsymlHdxRyyNB9rFoktvkz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad7d7a8f365abec6f3db2eaf5cc0a9f_JaffaCakes118
Files
-
fad7d7a8f365abec6f3db2eaf5cc0a9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
705cbe71b06353bac3360f8e798fc146
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
FindExecutableA
ShellExecuteA
ShellExecuteExA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ntext Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE