Static task
static1
Behavioral task
behavioral1
Sample
fdb4587d4b54a8715504c7e8dc7d7ea5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdb4587d4b54a8715504c7e8dc7d7ea5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdb4587d4b54a8715504c7e8dc7d7ea5_JaffaCakes118
-
Size
123KB
-
MD5
fdb4587d4b54a8715504c7e8dc7d7ea5
-
SHA1
99244ff2ac2714062f2f0798edd5f7e485b62bf4
-
SHA256
73c27f673ee87487515cfc635b8c5e6d91d540b49cb3404e08c566602fa1a927
-
SHA512
f81c23c54ea5405807362566b68f536f621dc2c5aa884721595efaecb5260a1c3eaa07e337575f90603928e6c93c04c97b711a05651d9bd5de343f59866d3bcb
-
SSDEEP
3072:E3eJWQyvjjwHfTLx5btEE7fEyws3uWV4:ZWQyLeLnOqfN+W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb4587d4b54a8715504c7e8dc7d7ea5_JaffaCakes118
Files
-
fdb4587d4b54a8715504c7e8dc7d7ea5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d6e7397a5b014d530de990bdeb34c0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysFreeString
gdi32
GetClipBox
GetDIBColorTable
advapi32
RegOpenKeyA
kernel32
lstrlenA
LocalFree
FindClose
LocalAlloc
GetModuleHandleA
GetLastError
GlobalAlloc
GetACP
GetProcAddress
GetCommandLineA
LockResource
ExitThread
GetUserDefaultLCID
GetCurrentThreadId
VirtualAllocEx
GetStartupInfoA
Sleep
SetThreadLocale
LoadLibraryA
comctl32
ImageList_GetBkColor
ImageList_Add
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Remove
version
VerInstallFileA
GetFileVersionInfoSizeA
user32
GetCursor
IsWindowEnabled
SetRect
GetWindowTextA
GetDesktopWindow
EnableScrollBar
ChildWindowFromPoint
GetSysColorBrush
CharLowerA
GetParent
GetMessagePos
CharNextA
PostMessageA
DrawIconEx
wsprintfA
BeginPaint
GetFocus
IsWindowVisible
GetMenuItemCount
IsWindowUnicode
FrameRect
GetActiveWindow
SetScrollRange
DrawTextA
SendMessageA
GetClientRect
CheckMenuItem
SetMenu
SetWindowPlacement
GetKeyboardLayoutNameA
TrackPopupMenu
GetSystemMenu
ClientToScreen
UnhookWindowsHookEx
KillTimer
CharLowerBuffA
DestroyMenu
FindWindowA
shell32
SHFileOperationA
SHGetFolderPathA
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ