Static task
static1
Behavioral task
behavioral1
Sample
fb920bbbc262c663db19450957e54df2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb920bbbc262c663db19450957e54df2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb920bbbc262c663db19450957e54df2_JaffaCakes118
-
Size
85KB
-
MD5
fb920bbbc262c663db19450957e54df2
-
SHA1
30df638678b9b329c7b745ed73268a2fa57c9410
-
SHA256
c614437e43deeaa84400c5926dd2bd3d0750a1e7c2dd89192bc9018ca7a47f0e
-
SHA512
10fd5f0aac8a9faad00ec9a8013a74625daccd85b3cac70881ec331ee789387ab712efa9bc96173044b7dfb1858deac9dddd29b0402846e18113c0cbb16ca9ca
-
SSDEEP
768:uxuLlOe6znWb1ccjQhQoATSGs4kJAfl9RfnZcC6zu0zqUH6d2SAJIMa0FskaHTPf:+U/7bZEiWu4W0FVAT63nFErJoseApXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb920bbbc262c663db19450957e54df2_JaffaCakes118
Files
-
fb920bbbc262c663db19450957e54df2_JaffaCakes118.exe windows:5 windows x86 arch:x86
09a62c63051c07f91e8273ba25ba974f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsMenu
GetMenu
GetFocus
AppendMenuW
GetScrollInfo
BeginPaint
advapi32
RegDeleteKeyA
RegCreateKeyW
RegLoadKeyA
RegGetKeySecurity
kernel32
ExitThread
GetPriorityClass
DeleteFileW
GetStdHandle
FreeResource
GetFileTime
GlobalFree
GetLastError
DeleteFileA
WriteFile
FlushFileBuffers
GetFileType
CopyFileA
GetCommandLineA
OpenFileMappingA
OpenFile
Sections
.6h8c Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.c91b Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b7039 Size: 42KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hheed Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.g00f8 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ