Static task
static1
Behavioral task
behavioral1
Sample
fad95c872837f7d37b6afc3ca7e29c8c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fad95c872837f7d37b6afc3ca7e29c8c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fad95c872837f7d37b6afc3ca7e29c8c_JaffaCakes118
-
Size
425KB
-
MD5
fad95c872837f7d37b6afc3ca7e29c8c
-
SHA1
8bc859ff6b0a76c8fab87dff77a461756fed96ad
-
SHA256
4a5c3b7633c854543c412eeb2560ec244573902659af7e4b6be2749e7a819933
-
SHA512
e2c9d509ae71aa9e467bd4db8fb4911428dde39a743ce778153b3db14a420b9f324de626a1a247f3b9cc6f7aced99764d96550d122749e9b959fee8001d5da99
-
SSDEEP
12288:qxpOE3zFHnJwJ4XFW6Hkb+itnk57nCeX:qxpOEDFHJPw6ELtk5G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad95c872837f7d37b6afc3ca7e29c8c_JaffaCakes118
Files
-
fad95c872837f7d37b6afc3ca7e29c8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cb7d0a302e96f735a4f1c2adc21408c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadSelectorEntry
CreateSemaphoreW
EnumDateFormatsExW
MoveFileExW
QueryPerformanceCounter
GlobalSize
HeapAlloc
LoadLibraryA
GetLocalTime
ExitProcess
OpenSemaphoreA
SystemTimeToTzSpecificLocalTime
SetConsoleCP
GetSystemTimeAsFileTime
InterlockedExchange
GetTickCount
GetFileAttributesExW
GetModuleHandleA
CreateEventW
lstrcatA
RtlUnwind
TerminateProcess
GetModuleFileNameA
HeapReAlloc
GetLogicalDrives
GetCurrentThreadId
VirtualAlloc
LeaveCriticalSection
GetProcAddress
ReadConsoleW
GetCurrentProcess
HeapFree
TlsFree
GetDateFormatW
AllocConsole
GetCurrentProcessId
VirtualQuery
ReadFile
GetVersion
gdi32
PlayEnhMetaFileRecord
SetBitmapBits
SetLayout
GetLogColorSpaceA
EnumFontsA
wininet
RetrieveUrlCacheEntryFileA
SetUrlCacheEntryInfoA
FindFirstUrlCacheEntryExW
UrlZonesDetach
InternetGetCertByURLA
GopherFindFirstFileW
RetrieveUrlCacheEntryStreamW
HttpSendRequestA
InternetShowSecurityInfoByURLA
HttpEndRequestW
InternetSetFilePointer
DeleteIE3Cache
CreateUrlCacheEntryW
InternetCloseHandle
user32
OemToCharW
GetMessageExtraInfo
CreatePopupMenu
PackDDElParam
EndDeferWindowPos
EditWndProc
DdeClientTransaction
SetWindowLongW
ValidateRect
RegisterClassExW
GetMenuItemInfoA
CreateDialogParamA
CallMsgFilterA
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ