Static task
static1
Behavioral task
behavioral1
Sample
fdb6031dfc0ce88e4071eed944b60743_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fdb6031dfc0ce88e4071eed944b60743_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdb6031dfc0ce88e4071eed944b60743_JaffaCakes118
-
Size
276KB
-
MD5
fdb6031dfc0ce88e4071eed944b60743
-
SHA1
26e6c7a7db7e3eca2206782fdf7e6207f38ca3e6
-
SHA256
2195c99cc40bc19bca3d3e29c75681104e47d1dfee722b2260196f30f5addf8b
-
SHA512
df7483403e7fa7bc32e44493268ab53b08c35b8c25dd382a6071cd72029382251681fcd5be589bee2dceab039d0601507c8b567b01a7772ad87b18527c1b5bc4
-
SSDEEP
6144:6nxg/DcalVaZNo4way/WTT42T6A+X1XPXwehGREcm:6xg/QsVaZN8aya45Bhf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb6031dfc0ce88e4071eed944b60743_JaffaCakes118
Files
-
fdb6031dfc0ce88e4071eed944b60743_JaffaCakes118.exe windows:4 windows x86 arch:x86
467fe8a95e9c9063a8dc79b032d7938b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
VirtualFree
GetModuleHandleA
GetTickCount
SizeofResource
UpdateResourceA
CloseHandle
ReadFile
CreateFileA
FreeResource
LockResource
LoadResource
FindResourceExA
VirtualProtect
GetModuleHandleW
GetProcAddress
LocalAlloc
GlobalFree
WriteFile
GlobalAlloc
UnlockFile
LockFile
SetFilePointer
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
FindClose
FindNextFileA
EndUpdateResourceA
BeginUpdateResourceA
VirtualQuery
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
GetVersion
GetCommandLineA
GetStartupInfoA
VirtualFreeEx
FreeLibrary
VirtualAlloc
CreateSemaphoreA
LoadLibraryW
VirtualAllocEx
Sleep
GetTempPathA
ExitProcess
GetLastError
GetCurrentDirectoryA
SetCurrentDirectoryA
user32
TranslateMessage
DispatchMessageA
GetDesktopWindow
IsWindow
IsWindowVisible
SetWindowRgn
DestroyIcon
CopyImage
CreateIconIndirect
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DrawIcon
HideCaret
GetDC
ReleaseDC
ShowCaret
EndPaint
gdi32
GetObjectA
CreatePen
CreateSolidBrush
SelectObject
Rectangle
DeleteObject
GetCharWidth32A
TextOutA
GetDIBits
CreateCompatibleBitmap
GetDeviceCaps
EnumObjects
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dbg Size: 17KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ssl Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE