Static task
static1
Behavioral task
behavioral1
Sample
fae558b480ddbfdc4e79e9a6395dfdbf_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fae558b480ddbfdc4e79e9a6395dfdbf_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fae558b480ddbfdc4e79e9a6395dfdbf_JaffaCakes118
-
Size
358KB
-
MD5
fae558b480ddbfdc4e79e9a6395dfdbf
-
SHA1
68f133a77eb2b260a54a80aa24978c789f5adc96
-
SHA256
153e534b5c86350383c10577aa71886e138f9627a249fae348034787d33d25c9
-
SHA512
cd9fd6c932ba1f8220149b74e280246fbc96344d5ade8db6528840992adefd698eb051aa885d34e4816f7d63e4867e7c217d53d252a3cb5c5e2bfcc785668ee6
-
SSDEEP
6144:5WF9bMkn/fkXkiUm8m6nlNdbcsOsFIlb8HIj1kjtbAbqA+ETn1StmaO+yk6071fM:kF9FQ4m2pcsOs2USOjtbAbqhEDRaF9t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae558b480ddbfdc4e79e9a6395dfdbf_JaffaCakes118
Files
-
fae558b480ddbfdc4e79e9a6395dfdbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
217a9519fd75f5119670d222b6ddb664
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FindFirstFileW
CopyFileW
EnumCalendarInfoExW
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
oleaut32
VARIANT_UserFree
SafeArrayCreateEx
VarDateFromI8
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 242KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE